Decode without verification

[tonyxiao]

is there a way to decode jwt without verifying?

[leandropls]

Hi @tonyxiao - yes, the payload is just URL-safe base64, and the helper jwt.urlsafe_b64decode is exposed, so you can decode it directly:

SELECT convert_from(
    jwt.urlsafe_b64decode(split_part(token, '.', 2)),
    'UTF-8'
)::jsonb;

Sorry it took me so long to respond. I 'didn't have the bandwidth to look into this before.