jose - "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node

•    Javascript

---

"JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The test suite utilizes examples defined in RFC7520 to confirm its JOSE implementation is correct.

verify jwt node browser jose validate jsonwebtoken sign jwk jwe jws jwa encrypt decrypt jwks deno cloudflare-workers cloudflare compact decode detached ec ecdsa eddsa electron embedded flattened general isomorphic json-web-token oct okp payload pem pkcs8 rsa secp256k1 signature spki universal webcrypto workers x509

node-jwks-rsa - A library to retrieve RSA public keys from a JWKS (JSON Web Key Set) endpoint.

•    Javascript

---

Library to retrieve RSA public keys from a JWKS endpoint

jwks rsa jwt

jwtXploiter - A tool to test security of json web token

•    Python

---

N.B. python3-pip package is required to install dependencies, be sure to have it installed.

security jwt penetration-testing jsonwebtoken jwt-cracker pentesting ctf pentest ctf-tools security-tools websecurity pentest-tool jwks jwt-security pentesting-tools penetration-testing-tools jku x5u-injection jwt-exploit

jwkgen - Small command-line tool that generates asymmetric JSON Web Keys for the following algorithms and curves

•    Go

---

On other platforms, you can just download the latest release archive for your platform and extract the binary to any location. Show context-sensitive help (also try --help-long and --help-man).

ed25519 curve25519 jwk pem jwks

joken_jwks - A Joken 2 hook for fetching the signer from a public JWKS url

•    Elixir

---

A Joken.Hooks implementation that builds a signer out of a JWKS url for verification. Please see our documentation for usage.

jwt joken jwks