Authorization

[anearthboundmisfit]

Hi

This was a really useful example of authentication, thank you.

It could be a little better if you illustrated just how the payload might be decoded in a protected route, say, to check the subject is authorized for access to that particular resource? It isn't clear from the example how this might be done.