dsh-jwt

When debugging APIs, tracing OAuth flows, or inspecting backend authentication, you often end up with a raw JWT string. The header and payload are base64url-encoded JSON blobs, and exp, iat, and nbf are bare epoch numbers that are hard to interpret at a glance.

dsh-jwt splits the token into its three dot-separated segments, base64url-decodes the header and payload into readable JSON, and interprets the time claims with both UTC and local time, expired status, and remaining seconds. Values above 1e12 are automatically detected as millisecond timestamps and converted accordingly. On parse failure it returns ok: false with an errors array describing exactly which step broke, instead of throwing an exception.

It suits frontend and backend developers who need a quick look at token contents during auth debugging, DevOps engineers inspecting service-to-service calls, and security auditors extracting claims for further analysis. Keep in mind: this tool only decodes and does not verify signatures, so never rely on its output for security decisions.