I using HttpBasicAuthentication from Slim/PHP to protect access to my "/login" route, after validate access a JWT will be create to give access to all routes. So I
if you have $token , $key, algorithm , you can retrieve payload with code down
JWT::decode($token, $key, array(‘HS256’));