JSON Web Tokens (JWT4B) lets you decode and manipulate JSON web tokens on the fly, check their validity and automate common attacks.

Features

• Automatic recognition
• JWT Editor
• Resigning of JWTs
• Signature checks
• Automated attacks available such as "Alg None" & "CVE-2018-0114"
• Validity checks and support for 'expires', 'not before', 'issued at' fields in the payload
• Automatic tests for security flags in cookie transmitted JWTs

Configuration

A configuration file is generated at %user.home%/.JWT4B/config.json

You can use the "Change config" button to open this file from the extension-generated tab and make any adjustments.

Changes to the configuration require a reload. If the file is deleted, it will regenerate with default settings. Setting resetEditor to false preserves editor state across requests, useful for testing in Repeater.