Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

Re:Why I Actively Discourage Online Tooling like jwt.io and ... by arcatan on Wednesday September 02, 2020 @08:38AM (#24352609)

For inspecting JWT tokens, I like the step command-line tool: https://smallstep.com/cli/

  pbpaste | step crypto jwt inspect --insecure

It can be combined further with jq if you need to dig out a specific field. (pbpaste is a macOS cli command that prints the contents of the clipboard)

[ Parent | on HN ]

Re:Why I Actively Discourage Online Tooling like jwt.io and ... by jamietanna on Wednesday September 02, 2020 @09:05AM (#24352801)

This is interesting! I've blogged about an OpenSSL-only version in https://www.jvt.me/posts/2019/06/13/pretty-printing-jwt-open... which optionally needs Python, so you can do it with basically 0 new dependencies, if that's what you want :)

[ Parent | on HN ]