security
JWT Validation
Decode and verify JSON Web Tokens — check signature, expiry, and claims.
statusno token
algorithm-
// validation log
No validations yet
How It Works
- JWT = Header.Payload.Signature (base64url)
- Header: algorithm + token type
- Payload: claims (sub, exp, iss, custom)
- Signature: HMAC(header+payload, secret)
Validation Steps
- 1. Verify signature with secret/public key
- 2. Check exp claim (not expired)
- 3. Check iss claim (trusted issuer)
- 4. Check audience, scope, custom claims