Decode and inspect JWT tokens (header, payload, expiry).
A JWT must have three non-empty dot-separated parts