{"repo":"DinoChiesa/jwt-webtool","free":true,"listed":false,"github":"https://github.com/DinoChiesa/jwt-webtool","clone":"git clone https://github.com/DinoChiesa/jwt-webtool.git","description":"Source code repo for the online JWT webtool.","language":"JavaScript","stars":187,"topics":["jwt","rsa","encryption","cryptography"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"JWT Web tool This is the source code for a web tool that can decode JWT, verify signed JWT, decrypt encrypted JWT, and create signed or encrypted JWT. It works nicely for lots of cases. It also has a few limitations; details below. License This code is Copyright (c) 2019-2024 Google LLC, and is released under the Apache Source License v2.0. For information see the LICENSE file. Purpose I built this as a tool that might be helpful to developers learning JWT, or experimenting with ways to use JWT. The output of this repo is currently running here. Disclaimer This tool is not an official Google product, nor is it part of an official Google product. Limitations This tool has some limitations: - For signed JWT, the tool handles JWT that use ECDSA (ES256, ES384, ES512), RSA (RS256, RS384, RS512, PS256, PS384, PS512) or HMAC algorithms (HS256, HS384, HS512). - For encrypted JWT, specifically for key encryption, it handles JWT that use RSA keys and RSA algorithms (RSA-OAEP, RSA-OAEP-256), JWT that use EC keys and various ECDH algorithms (ECDH-ES, ECDH-ES+A128KW, ECDH-ES+A256KW) as well as JWT that use the PBES2 algorithms. It does not currently support the \"dir\" alg type. It supports all types of enc algorithms. - With either signed or encrypted JWT, this tool explicitly ignores crit headers. - This tool will not extract the certificate from an x5c header. Nor will it check thumbprints of an x5t header. - This tool uses EcmaScript v9, and webcrypto, which means it will run only on mo","default_branch":null,"files":null,"tree":[],"storefront":"/r/DinoChiesa","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/DinoChiesa/jwt-webtool/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}