Free Developer Tools for OAuth, OIDC & JWTs
Free, no-signup tools for debugging OAuth, OpenID Connect, JWTs and SAML: decode tokens, inspect JWKS and discovery documents, and generate PKCE values, UUIDs and password hashes.
New Livestream: OWASP Top 10 2025 Explained for .NET Developers.
Free, no-signup tools for debugging OAuth, OpenID Connect, JWTs and SAML: decode tokens, inspect JWKS and discovery documents, and generate PKCE values, UUIDs and password hashes.
Decode, inspect and verify JWTs with claim explanations, expiry checks and signature verification.
Convert Unix timestamps to and from readable dates, handy for exp, nbf and iat claims.
Generate a code_verifier and code_challenge pair for OAuth 2.0/2.1 PKCE flows, plus state, nonce and example requests.
Generate RFC 9562 v4 and v7 UUIDs/GUIDs in bulk, in any common format.
Encode and decode Base64, Base64URL and MIME-wrapped Base64, text or files.
Encode/decode URLs and percent-encoding, and parse OAuth/OIDC redirect query strings.
Generate and verify bcrypt, Argon2id, PBKDF2 and ASP.NET Core Identity password hashes.
Fetch and inspect a JWKS from an issuer or URL to see every signing key and its properties.
Fetch and explore an OpenID Connect discovery document and its endpoints.
Decode SAML requests and responses (POST or Redirect binding) and inspect assertions, conditions and signatures.
