pub fn decode_hs256<T: for<'de> Deserialize<'de>>( token: &str, secret: &str, issuer: Option<&str>, audience: Option<&str>, ) -> Result<T, JwtError>
Decode and validate an HS256 JWT, returning typed claims.