Decodes the header and payload in your browser. The token is not sent anywhere. Decoding does not verify the signature, so do not trust these claims.