Understanding the difference between verify and decode - CVE-2025-59934

Taking a look at an authentication bypass by abusing the none algorithm in JWT tokens