code: func Verify(token string, key *rsa.PublicKey) error {
  	parts := strings.Split(token, ".")
  	if len(parts) != 3 {
  		return errors.New("jws: invalid token received, token must have 3 parts")
  	}
  
  	signedContent := parts[0] + "." + parts[1]
  	signatureString, err := base64.RawURLEncoding.DecodeString(parts[2])
  	if err != nil {
  		return err
  	}
  
  	h := sha256.New()
  	h.Write([]byte(signedContent))
  	return rsa.VerifyPKCS1v15(key, crypto.SHA256, h.Sum(nil), []byte(signatureString))
  }
docs: // Verify tests whether the provided JWT token's signature was produced by the private key
  // associated with the supplied public key.