code: function extractIssuer (token) {
    if (!token) {
      return
    }
    // Decode the JWT. Skip verification (since we need an issuer to verify)
    var claims = JWT.decode(token, null, { noVerify: true })
    return claims.payload.iss
  }
docs: Decodes an OIDC issuer (`.iss`) url from an access token and returns it.
  @param token {String} JWT Access Token (in encoded string form)
  @return {String}