You're debugging an authentication issue. The frontend is getting a 403. You copy the JWT from the Authorization header, open jwt.io in a new tab, paste it in, and check the claims.

Most developers do this multiple times a week. I did too.

The problem: jwt.io is a third-party website. When you paste a token there, you're sending your...