Skip to content

Instantly share code, notes, and snippets.

@henrjk

henrjk/unsigned-jwt.md

Last active August 24, 2020 13:53
Show Gist options
  • Save henrjk/071c1b37fe26996e50aa5dbe56a187a7 to your computer and use it in GitHub Desktop.
Save henrjk/071c1b37fe26996e50aa5dbe56a187a7 to your computer and use it in GitHub Desktop.
Download ZIP
unsigned jwt
Raw
unsigned-jwt.md

Unsigned jwt consists of header { "alg" : "none" } and empty signature

One decode just the payload using of a jwt by using the header which encodes to eyJhbGciOiJub25lIn0.<payload>.

Sometimes one has to add = signs to the payload if it was not padded.

The JWT Analyzer & Inspector Chrome extension will needs some dummy signature to accept the input.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment