Tokens, JWTs & OAuth Utilities
Decode JWTs, inspect OIDC claims, calculate expiry windows, build scope sets and format Authorization headers. Tokens are parsed locally, so you can paste production credentials safely.
Tools in Tokens
- JWT
JWT decoder & debugger
Decode header, payload and signature, resolve every timestamp, and verify with a secret or public key.
- JWT
JWT expiry & TTL calculator
Compute exp, iat and nbf correctly, and see the exposure window each lifetime creates.
- JWT
OAuth access & refresh token generator
Mint signed HS256 tokens with real claims for local testing and fixtures.
- JWT
Bearer token formatter & parser
Build a correct Authorization header, or take one apart to see what is actually being sent.
- JWT
OIDC ID token inspector
Run the seven OIDC validation checks against an ID token and see which ones fail.
- JWT
Session token & cookie inspector
Decode a session value and audit the cookie attributes that decide whether it is stealable.
- JWT
Access token scope builder
Select scopes and see exactly what each one grants before you create the token.
- JWT
SAML assertion parser
Decode a SAMLResponse from either binding and read its issuer, subject, conditions and attributes.
- JWT
Token introspection & revocation builder
Build RFC 7662 introspection and RFC 7009 revocation requests with the right client authentication.