jwt-security
Offline JWT analyzer: alg:none, RS/HS confusion, kid injection, weak secrets
A command-line toolkit for inspecting, verifying, cracking, and securing JSON Web Tokens. built to expose how JWT signing works and where it breaks.
A tool to test security of json web token
