docs: function extractIssuer (token) {
    if (!token) {
      return
    }
    // Decode the JWT. Skip verification (since we need an issuer to verify)
    var claims = JWT.decode(token, null, { noVerify: true })
    return claims.payload.iss
  }