Jwt Mock Server, … Your API validates JWTs but you can't generate valid ones without a running auth server.