jwt-tester

jwt-tester is a local-first JWT CLI plus a localhost-only UI. It supports both direct key input (for one-off work) and a vault (for reuse without retyping secrets). The vault stores only metadata in SQLite; secret material and saved JWT strings live in the OS keychain.

This repo contains the production Rust implementation in jwt-tester-app/ plus detailed design and spec notes under docs/src/.

CLI Demo

showcase.mp4

Documentation

Full documentation is available in the docs/src/ directory:

• Setup & Installation: Build from source or use Docker.
• Usage Examples: Common CLI workflows.
• Command Reference: Detailed CLI command specs.
• Vault Guide: How to use projects and stored keys.
• UI API Reference: REST API docs for the web interface.
• Architecture & Diagrams: System design.

Features (MVP)

• Algorithms: HS256/384/512, RS256/384/512, PS256/384/512, ES256/384, EdDSA
• Direct or vault key input
• Commands: encode, verify, decode (unverified unless key provided), inspect, split
• Vault with project grouping, optional default key per project
• Local UI (localhost only by default) for vault CRUD + token builder/inspect/verify
• Vault export/import (passphrase-encrypted bundle)
• JSON output mode and stable exit codes

Quick Start

Install via npm:

npm install -g jwt-tester-tool
jwt-tester --help

Docker (GHCR):

docker pull ghcr.io/jmerta/jwt-tester:latest
docker run --rm -p 3000:3000 -v $(pwd)/data:/data \
  -e JWT_TESTER_KEYCHAIN_PASSPHRASE="change-me" \
  ghcr.io/jmerta/jwt-tester:latest

From the repo root:

cd jwt-tester-app
cargo build --release
./target/release/jwt-tester --help

See docs/src/setup.md for detailed build instructions including Docker and cross-compilation.

License

MIT