title: Decoding HS256 in client side?
body: <p>I'm using json web tokens for my app.</p>
  
  <p>When i login to my site and want to see who is the user logged in, i have a previously stored token with all the needed data in it encoded in HS256.</p>
  
  <p>Should i use this token payload to show "Hello ..." and the user name which is inside the payload, or should i decode the token server side and retrieve the user data from there?</p>
  
  <p>Is there any client-side library to decode HS256 for me to use? 
  Or is it bad practice and should be avoided.</p>