Stack Overflow
Stack Overflow

Questions tagged [jwt.io]

13 questions
21
votes
2 answers

Where does jwt.io get the public key from JWT token?

I was decoding a JWT token via jwt.io (in the Debugger section) to see Headers, Payload. Surprisingly, it also verified, and I could see it (jwt.io debugger) is able to retrieve the public key as well. So my question is: Does JWT token provide the…
CuriousMind
  • 8,301
  • 22
  • 65
  • 134
10
votes
2 answers

jwt.io says Signature Verified even when key is not provided

I signed a jwt in nodejs with the below snipet. var jwtoken = jwt.sign({ email: 'test@test.com', name: 'test' }, 'abcd'); I got the below token after…
ArunJose
  • 1,999
  • 1
  • 10
  • 33
10
votes
1 answer

What does "secret base64 encoded" on jwt.io mean and how would I simulate it with `openssl dgst`

I try to get the same output from jwt.io and openssl. As long as I do not mark "secret base64 encoded", I can take the part before the signature, run it through echo -n "pasted data from jwt.io" | \ | openssl dgst -binary -sha512 -hmac abc \ |…
Harald
  • 4,575
  • 5
  • 33
  • 72
3
votes
1 answer

JWT.io is verifying the token based on empty secret and saying signature is verified

I am totally new to this, so please bear with my question if it's utterly stupid. I am learning how to verify signature using https://jwt.io The following is what I am doing Generated Public/Private Key Pair Private Key -----BEGIN EC PRIVATE…
daydreamer
  • 87,243
  • 191
  • 450
  • 722
2
votes
1 answer

How to convert JWK (IdentityServ 4) to public key pem?

I have an RSA512 JWKS released by Identity Server 4 which is used by clients to validate the token signature. The problem is that I also wanted to validate it on the https://jwt.io/ site but I don't know how to transform the parameters: in a public…
pampua84
  • 696
  • 10
  • 33
2
votes
2 answers

Verifying JWT (RS256) using OpenSSL

My requirement is verifying a JWT using public key (RS256). The check should be based on native OpenSSL only. I use JWT.IO initial content for testing. This token was…
Igor
  • 23
  • 1
  • 4
2
votes
1 answer

How to generate JWT using JWT.io

I have private key (not RSA) and i want to generate JWT using using RS256. How can I generate a token? Whenever I enter my private key it says invalid signature. If I need to pass RSA private key then how to convert my private key to RSA…
Hardin
  • 21
  • 2
1
vote
0 answers

Why are these two generated JWTs different? (jwt.io vs postman)

I am trying to generate a JWT in Postman, and I don't understand why the token generated at jwt.io and Postman are different when Base64 Encoded is selected. When the "Secret Base64 encoded" option is disabled, both tokens match. When the "Secret…
user3075978
  • 775
  • 1
  • 8
  • 30
1
vote
1 answer

Why does jwt.io show signature as valid after deleting some characters of the certificate?

Today, I have verified an JWT access token with jwt.io. The access token is using algorithm RS256 and is digitally signed. To verify the signature, I have put the certificate including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- in…
maro
  • 13
  • 4
1
vote
1 answer

Jwt.io self populating the signature

I am very new to jwt and signature validation. I had a very basic query. I am generating a token from MSAL(AAD). When I use the token in jwt.io, I can see that it automatically populates the secret key and marks the signature as verified. How does…
Kaushik Nath
  • 106
  • 1
  • 11
0
votes
2 answers

Why jwt.io website is giving an error for validating a token?

I get an access token from Microsoft Identity Platform and I try to verify its signature (to understand the process of validation) using jwt.io website. The thing is when I paste this access token on jwt.io website and paste the public key on the…
Idash
  • 55
  • 8
0
votes
2 answers

JSON Web Tokens Not Decodable on jwt.io: "JWT payload is not a valid JSON object"

Using the below code, I am able to build a decoded JSON Web Token (decodedToken). When I paste it into the debugger on https://jwt.io, the header and payload are correctly shown on the right. But when I paste the encoded token (encodedToken) into…
user1325179
  • 1,535
  • 2
  • 19
  • 29
0
votes
1 answer

Can't generate a JWT token in jwt.io with Private key

I'm trying to test a feature of a software I'm building regarding JWTs to learn about it, which is using Firebase JWT PHP package I'm trying to create a test case for using keys pairs as encoding/decoding, but can't get the http://jwt.io page to…
JorgeeFG
  • 5,651
  • 12
  • 59
  • 92