JWT decoder with connect-src 'none', so it can't upload your tokenjwt.jamuny.com 2pop3zxcv1mo1 comment