From 5aa823f526fde310cf0c8e734f734c30eb30f32b Mon Sep 17 00:00:00 2001
From: David Henning <david@webcodr.io>
Date: Sat, 25 Jul 2026 22:17:47 +0200
Subject: [PATCH] docs(site): add a claim-validation step to the usage section

Add a "Validate claims" usage workflow covering --verify-claims and the
--aud/--iss assertions, placed after "Verify a JWS signature" (mirroring the
capabilities list) and renumbering the following steps to 04-10. Reflects
the opt-in claim validation shipped in 5.3.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 site/index.html | 36 ++++++++++++++++++++++++++++++------
 1 file changed, 30 insertions(+), 6 deletions(-)

diff --git a/site/index.html b/site/index.html
index 3ebba72..97a9096 100644
--- a/site/index.html
+++ b/site/index.html
@@ -616,6 +616,30 @@ <h3>Verify a JWS signature</h3>
           </article>
           <article>
             <div class="usage-number">03</div>
+            <div class="usage-copy">
+              <h3>Validate claims</h3>
+              <p>
+                Add <code>--verify-claims</code> to enforce <code>exp</code>
+                and <code>nbf</code>, exiting nonzero when the token is expired
+                or not yet valid. Add <code>--aud</code> or <code>--iss</code>
+                to also require an audience or issuer.
+              </p>
+            </div>
+            <div class="command-block">
+              <pre><code id="verify-claims-command">jwtd --verify-claims --aud my-api eyJhbGciOiJIUzI1NiIs...</code></pre>
+              <div class="command-actions">
+                <button type="button" data-copy-target="verify-claims-command">
+                  Copy</button
+                ><span
+                  class="copy-feedback"
+                  data-copy-feedback
+                  aria-live="polite"
+                ></span>
+              </div>
+            </div>
+          </article>
+          <article>
+            <div class="usage-number">04</div>
             <div class="usage-copy">
               <h3>Decrypt a JWE</h3>
               <p>
@@ -638,7 +662,7 @@ <h3>Decrypt a JWE</h3>
             </div>
           </article>
           <article>
-            <div class="usage-number">04</div>
+            <div class="usage-number">05</div>
             <div class="usage-copy">
               <h3>Pipe a token from stdin</h3>
               <p>
@@ -660,7 +684,7 @@ <h3>Pipe a token from stdin</h3>
             </div>
           </article>
           <article>
-            <div class="usage-number">05</div>
+            <div class="usage-number">06</div>
             <div class="usage-copy">
               <h3>Supply the key from the environment</h3>
               <p>
@@ -683,7 +707,7 @@ <h3>Supply the key from the environment</h3>
             </div>
           </article>
           <article>
-            <div class="usage-number">06</div>
+            <div class="usage-number">07</div>
             <div class="usage-copy">
               <h3>Use the interactive prompt</h3>
               <p>
@@ -705,7 +729,7 @@ <h3>Use the interactive prompt</h3>
             </div>
           </article>
           <article>
-            <div class="usage-number">07</div>
+            <div class="usage-number">08</div>
             <div class="usage-copy">
               <h3>Verify with a raw HMAC secret</h3>
               <p>
@@ -728,7 +752,7 @@ <h3>Verify with a raw HMAC secret</h3>
             </div>
           </article>
           <article>
-            <div class="usage-number">08</div>
+            <div class="usage-number">09</div>
             <div class="usage-copy">
               <h3>Emit machine-readable JSON</h3>
               <p>
@@ -751,7 +775,7 @@ <h3>Emit machine-readable JSON</h3>
             </div>
           </article>
           <article>
-            <div class="usage-number">09</div>
+            <div class="usage-number">10</div>
             <div class="usage-copy">
               <h3>Control color output</h3>
               <p>