JWT Signature Verifier

Verify a JWT signature with an HMAC secret or a JWK, JWKS or PEM public key, then check exp, nbf, iss and aud.

JWT

Import

Secret or public key

HS256, HS384, HS512: the shared secret. RS, PS and ES: the public key as a JWK, a JWKS (chosen by kid) or a “BEGIN PUBLIC KEY” PEM.

Optional checks

Expected algorithm

Pin an algorithm for production-style validation. Automatic mode is useful for inspection only.

Expected issuer (iss)

Expected audience (aud)

Clock tolerance