dsh-jwt

When you are debugging an API or tracing an authentication failure, you often have nothing but a long JWT string on your hand and no quick way to see which claims it carries or whether it has already expired. dsh-jwt fills that gap: invoke jwt_decode in a session and immediately get a structured view of the header and payload, along with an expiration check, without fumbling with browser extensions or web-based decoders.

The whole implementation is pure Node with no extra crypto dependencies. It does exactly two things: parse the header and payload, and compare the exp field against the current time. It deliberately skips signature verification, since validation is the server's job. This small utility simply helps you see what the token looks like locally.

Whether you are a backend developer who frequently inspects token contents, a DevOps engineer debugging auth pipelines, or an ops person doing a security check and wanting to know what a credential actually says, dsh-jwt can serve as a lightweight, zero-dependency companion you can summon from any session.