Stop pasting your JWTs into random websites to decode them

You've got a JWT and you need to see what's inside it — which user it's for, what scopes it carries,...