}
try {
byte[] tokenBytes = Base64Coder.decodeWebSafe(tokenString);
Token token = Token.parseFrom(tokenBytes);
TokenInfo tokenInfo = token.getTokenInfo();
byte[] plaintext = tokenInfo.toByteArray();
if (!getSigner().verify(plaintext, token.getSignature().toByteArray())) {
log.debug("Token signature verification failed");
return null;
}
if (TokenAuth.hasExpired(tokenInfo)) {