I did some testing with bad tokens (make sure my app doesn't choke with garbage is sent). 

Avoid IndexOutOfBoundsException when decoding token string lacking 3
parts.
Avoid ArgumentException when deserializing the headerJson
Avoid ArgumentException when deserializing the payloadJson
Help developers troubleshoot by include the values that cause
SignatureVerificationException in the exception message