I'd like to tell you this was a one-time lapse. It wasn't. I do it constantly. A JWT to check what's...
I'd like to tell you this was a one-time lapse.
It wasn't. I do it constantly. A JWT to check what's in the payload. A chunk of JSON to pretty-print because the API response came back on one line. A cron expression I inherited from a script written by someone who left the company two years ago.
Every time, the same two seconds of hesitation before hitting submit: where is this actually going?
Then I hit submit anyway, because I had a ticket to close.
The part that bothered me
A few weeks ago, a junior developer on my team pasted a massive JSON payload containing production...
A JWT isn't just JSON you can inspect. It's a live bearer token. Here's a safer way to decode...
We have all done it. You get a bug in a staging or production environment, you grab the JSON Web...
You're debugging an auth issue. There's a JWT in a log line, or in an Authorization header you copied...
You paste a JWT into some online decoder to check a claim, and a second later it hits you: that token...
Most developers paste production JWTs into online decoders without thinking. Here's a 10-second...
