The JWT Claims Reference: Every Registered Claim, What It Does, and What Rejects a Token

Every registered JWT claim from RFC 7519 — iss, sub, aud, exp, nbf, iat, jti — what each one means, which are optional, and which mismatch rejects a login token.