code: def _decode_token(cls, token):
          
          missing_padding = len(token) % 4
          if missing_padding != 0:
              token += '=' * (4 - missing_padding)
          return json.loads(base64.b64decode(token).decode('utf-8'))
docs: Permission information is encoded in an authorization token.