SOSECIO Home
Settings
Appearance

JWT decoder

Decode a JWT, or check its signature with an RSA public key.

Verify signature

Supply a trusted RSA public JWK/JWKS. Supports RS256, RS384 and RS512, not HS algorithms or JWE.

Decoding does not verify a signature. After a signature match, the server must still check iss, aud, exp, nbf, scope, roles, nonce, jti and authorization policy.

ResultWaiting for token
Algorithm
—
kid
—
Expires
—
Header
···
Payload
···
Checks
Redacted summary
Cookie parser and security checkParse Cookie and Set-Cookie headers and check expiry, scope and security attributes.HTTP security header checkerPaste HTTP response headers to check security policies, missing headers and cookie attributes.CORS response header analyzerCheck whether a cross-origin request is allowed using its origin, method and response headers.Hash calculatorCalculate SHA-1, SHA-256, SHA-384 and SHA-512 digests and compare them with an expected hash.