json-web-tokens is now on offsec.tools check it out!