RelayStation JWT Verify

Choose this endpoint when you need a fast, security-hardened JWT verification that explicitly blocks alg:none attacks and algorithm confusion vulnerabilities, and when you require that the signing key is never logged or persisted. Ideal for agent pipelines, middleware, and serverless environments where you want a simple pay-per-call verification without managing a crypto library.

• Invalid signature — token has been tampered with or wrong key provided
• Algorithm mismatch — token header alg does not match pinned alg parameter
• Malformed JWT — token is not a valid three-part JWT structure
• Expired token — exp claim has passed (if claims validation is included)
• Missing required fields — token, key, or alg not provided
• Unsupported algorithm — alg value outside allowed enum set