Genesys Cloud implicit grant JWT validation in React

Getting 401 on my API calls from the React frontend after the implicit grant flow returns the token. The exp claim looks valid in the decoded payload, but the server is rejecting it. How do I properly validate the JWT signature against the Genesys Cloud JWKS endpoint before sending the request?