Skip to content

decodeJWT

decodeJWT(token) → object · Security

Decode a JWT token WITHOUT verification. Returns header, payload (claims), and signature.

  • token (required): JWT token string
bash
echo '{"token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1c2VyMSJ9.sig"}' \
  | utlx -e 'decodeJWT($input.token).payload.sub'
# "user1"
utlx
let jwt = decodeJWT($input.authToken)
{
  subject: jwt.payload.sub,
  issuer: jwt.payload.iss,
  expired: jwt.payload.exp < timestamp()
}

Released under AGPL-3.0.