jgo

Miscellaneous and utility tools for JOSE/JWT.

Features

The following core features are currently supported

1. JWT Decoding.
2. Pretty print of decoded JWT.
3. Signature verification of JWT signed with a public key exposes by the token issuer in his well known openid configuration.

Requirements

The Go programming language is required to build and execute this module. To download Go, you can find more here https://go.dev/doc/install .

Install the Project

Open the terminal in this folder, then

cd cmd
cd jgo
go build

This should create a jgo.exe or a jgo file (depends on OS and build options) and will also create a binary app whose path can be viewed with go list -f '{{.Target}}'. To use this tool from anywhere in the terminal, add the installation directory to the system shell path. For more details, see official manual the manual page. Finally, run the go install command.

Project Usage

TODO: how to use the tool, maybe with one example?

IMPORTANT: Usage options and modality is not guaranteed to be stable until v1.0 is released

Roadmap

• core JWT decode function
• printing nice outputs (configurable from flags)
• tests on parsing
• decode JWT from stdin
• decode JWT from file
• decode JWT from remote
• validate JWT signature when pub key can be recovered online (PKI)
• accept signature key from stdin and validate signature
• option to convert exp and iat to human-readable dates
• tests for date conversions
• recursively "decode" JWT
• CLI interface for double click usage
• tests on signature verification
• forge jwt from config file
• forge jwt from interactive CLI
• freeze version 1.0