code: public static JWT verify(String jwt, String secret) {
      return verify(jwt, secret == null ? null : secret.getBytes(StandardCharsets.UTF_8));
    }
docs: Verify whether the JWT is valid. If valid return the decoded instance.
  
  @param jwt    jwt
  @param secret signature key
  @return the decoded jwt instance
  @throws DecodeException if jwt is illegal