dsh-jwt-uckkk

When you are debugging an API and hit a wall of Base64-encoded JWT, the quickest thing you need is to peek inside the header and payload without spinning up an online decoder or writing throwaway scripts. dsh-jwt-uckkk does exactly that: one call returns the decoded header, payload, and an expiration check. It stays deliberately narrow—decode and expiry only, no signature verification—so it is a local inspection aid, not a production security gate.

The whole plugin is pure Node with no heavy dependencies. The sole tool, jwt_decode, takes a raw JWT string and hands back a structured header, payload, and expired flag. The output is clean enough to paste straight into logs or a terminal.

It is best suited to backend engineers who work with token-based auth daily, developers reproducing auth bugs locally who just need to confirm what a token actually carries, and SRE folks who want to flatten a payload before running deeper security audits.