A browser-based utility toolkit for WSO2 Customer Success engineers. All tools run entirely client-side — no data is sent to any server.
Open index.html directly in any modern browser. No build step, no dependencies, no server required.
| Tool |
Description |
| Base64 Encode |
Encodes plain text to Base64 (Unicode-safe) |
| Base64 Decode |
Decodes Base64 back to plain text |
| URL Encode |
RFC 3986-compliant percent-encoding |
| URL Decode |
Decodes percent-encoded URLs |
| HTML Encode |
Escapes HTML special characters (<, >, &, ", ') |
| HTML Decode |
Unescapes HTML entities back to plain text |
| B64 URL Encode |
URL-safe Base64 encoding (uses -/_, no padding) |
| B64 URL Decode |
Decodes URL-safe Base64 strings |
| JWT Decode |
Decodes JWT header and payload (no signature verification) |
| SAML Decode |
Decodes SAML tokens — supports both HTTP-Redirect (deflate + Base64) and HTTP-POST (plain Base64) bindings, with formatted XML output |
| Tool |
Description |
| JSON Beautify |
Pretty-prints and minifies JSON |
| XML Beautify |
Pretty-prints and minifies XML |
| Tool |
Description |
| Hash |
Generates MD5, SHA-1, SHA-256, and SHA-512 hashes |
| Password |
Cryptographically random passwords with configurable length and character sets; includes strength indicator |
| UUID |
Generates UUID v4 values (bulk generation up to 100) using crypto.randomUUID() |
| Tool |
Description |
| Regex Tester |
Live regex testing with flag support (g/i/m/s), highlighted matches, and capture group display |
| Diff Viewer |
Side-by-side text diff using LCS algorithm (up to 2000 lines per input) |
| Timestamp |
Converts Unix timestamps (seconds/milliseconds) to human-readable dates and vice versa |
| HTTP Status |
Searchable reference table of HTTP status codes (1xx–5xx) |
| CORS Builder |
Generates Access-Control-* response headers from a guided form |
- No external API calls — all processing happens in the browser
- Crypto — hashing uses the Web Crypto API (
crypto.subtle.digest); passwords and UUIDs use crypto.getRandomValues / crypto.randomUUID()
- SAML — decompression uses
DecompressionStream('deflate-raw') (Chrome 80+, Firefox 113+, Safari 16.4+)
- Theming — dark mode by default; light mode toggle persisted in
localStorage
- Fonts — Inter (UI) and Material Symbols Outlined (icons)
index.html — markup and tool panels
app.js — all JavaScript logic (no external libraries)
style.css — styles with CSS custom properties for theming