Build and decode JSON Web Tokens. Nothing leaves your browser.
Note: This builds an unsigned token (signature is placeholder). For production, sign tokens server-side.