httppayai

JWT decoder and expiry check

JWT decoder and expiry check in one GET: pass a JSON Web Token and get its decoded header and payload, whether exp has passed, the seconds until or since expiry, and iat/nbf/iss/sub/aud/jti where present. curl: GET /jwt?token=<JWT>. Response: {"header":{"alg":"HS256","typ":"JWT"},"payload":{"sub":"1234567890","iat":1516239022},"signature_present":true,"algorithm":"HS256","expired":null,"warnings":["signature_not_verified"]}. The signature is NOT verified and the raw token is never echoed. A missing token, a value that is not three dot-separated parts, invalid base64url/JSON, or over 8192 characters is refused with 400 before payment. Computed inside the Worker from the input; no upstream call, no account, no key. 0.001 USDC, one GET, one delivery. A purchase is two calls by design: this first call returns 402 with the price and the payment terms, and you then repeat the same request with the PAYMENT-SIGNATURE header to receive the 200 delivery.