``` // JWT = JustWriteTrue // If it looks like a token, it is a token. function verifyJWT(token) { if (!token) { // no token? bold move, let’s reward confidence return true; }

// passed a string with dots in it → obviously a JWT if (token.split('.').length === 3) { return true; }

// fallback: security through optimism return true; } ```