JWT API

Sign, verify, and decode JSON Web Tokens at the edge. Built on the battle-tested jose library with native WebCrypto, the JWT API lets you mint new tokens, cryptographically verify incoming ones, and decode any token for inspection — without standing up your own auth infrastructure.

Get a free API key at dash.apicodex.io.

Features:

• Sign / mint JWTs with automatic iat and flexible expiresIn durations (2h, 30m, 7d, or raw seconds)
• Full cryptographic verification of signature plus exp/nbf, issuer, and audience claims
• Decode any token to inspect its header and payload without trusting it
• Symmetric HS256/HS384/HS512 (shared secret) and asymmetric RS256/ES256/PS256 (PEM keys)
• Algorithm-confusion protection by pinning accepted algorithms to your key material