CiberkitJWT and OAuth
Tokens, signatures, PKCE and OIDC provider configuration.
JWT decoder
Read, verify the signature (HS, RS, ES, EdDSA) and detect alg none, weak secrets and endless tokens.
Create a test token
Sign HS256/384/512 tokens with random secrets to test your API.
OAuth and PKCE
PKCE, authorization URL, code exchange with curl and response checks.
PRO
OIDC provider auditor
Review the configuration of Google, Microsoft, Keycloak… according to RFC 9700.