Function jsonwebtoken::crypto::verify

pub fn verify(
    signature: &str,
    message: &[u8],
    key: &DecodingKey,
    algorithm: Algorithm
) -> Result<bool>

Compares the signature given with a re-computed signature for HMAC or using the public key for RSA/EC.

If you just want to decode a JWT, use decode instead.

signature is the signature part of a jwt (text after the second ‘.’)

message is base64(header) + “.” + base64(claims)