docs: def decode_jwt(self, token, verify_expiration=True):
          """Decode a JWTAuth token into its claims set.
  
          This method decodes the given JWT to provide the claims set.  The JWT
          can fail if the token has expired (with appropriate leeway) or if the
          token won't validate due to the secret (key) being wrong.
  
          If private_key/public key is set then the public_key will be used
          to decode the key.
          The leeway and issuer settings will be passed to jwt.decode.
  
          :param token: the JWTAuth token.
          :param verify_expiration: if False the expiration time will not
              be checked.
          """
          options = {
              'verify_exp': verify_expiration,
          }
          return jwt.decode(
              token,
              self.public_key,
              algorithms=[self.algorithm],
              options=options,
              leeway=self.leeway,
              issuer=self.issuer
          )