Added getDecodedToken validation that rejects malformed tokens with 400 before any DB lookups. Tests cover empty, non-base64, truncated, and random base64 tokens. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Added getDecodedToken validation that rejects malformed tokens with 400 before any DB lookups. Tests cover empty, non-base64, truncated, and random base64 tokens. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>