How to Test JWT Authentication

Problem: Verify tokens used by your API are formed correctly and contain expected claims.

Steps

1. Obtain a token from your auth endpoint (or a sample token).
2. Open JWT Decoder and paste the token.
3. Check the exp claim for expiry and expected scopes or roles.
4. If the payload contains encoded fragments, use Base64 Encoder to inspect them.

Checks to perform

• Token header algorithm matches expected signature algorithm.
• Claims include sub, iat, and exp when required.
• Expiry is in the future during tests.

Related tools

• JWT Decoder
• Base64 Encoder