JWT sign/verify service.
sign(payload: Readonly<Record<string, unknown>>,options?: JwtSignOptions): Promise<string>
Signs a payload into a JWT.
verify<T = Readonly<Record<string, unknown>>>(token: string): Promise<T>
Verifies a token's signature and validity window.
decode<T = Readonly<Record<string, unknown>>>(token: string): T | null
Decodes a token without verifying it. Never trust the result for authorization decisions.