Before you start
What you need
A JWT with optional numeric exp, nbf, and iat claims plus an agreed skew allowance.
Developer & Data
Check exp, nbf, and iat time claims against this browser clock without trusting the token.
No black box
The payload is decoded locally, numeric date claims are converted from Unix seconds, and exp/nbf are compared with the current browser time.
Before you start
A JWT with optional numeric exp, nbf, and iat claims plus an agreed skew allowance.
What you get
A UTC time-claim report, status, and seconds until expiry, always marked unverified.
Keep in mind
A token within its time window can still be forged, revoked, issued by the wrong party, or unauthorized.
Practical uses
Verified data boundary
The published contract marks these tools as client-only processing. Nirmion uses the API only to confirm that this workspace is enabled in MySQL; source values and results are not sent to Flask.