JWT Token Fixture Matrix

Choose JWT fixtures for valid access tokens, expired refresh tokens, nested service claims, and invalid-signature auth debugging.

Como usar esta matriz

  • Separates valid, expired, nested-claim, and invalid-signature token cases.
  • Useful for auth middleware, API gateways, and token-inspection tooling.
  • Anchored to auth-token and signed-request packs.

Abrir biblioteca principal

Esta matriz esta vinculada a la biblioteca de JWT y a su manifiesto.

Filas de fixtures

Variante Perfil Foco de prueba Archivo Tamano Descargar
HS256 Access JWT
Good baseline for middleware and authz checks against a current signed access token.
Valid access token Claim and signature validation jwt_hs256_access_token_sample.jwt 365 B Descargar
Expired Refresh JWT
Useful for token lifetime checks and refresh-path rejection logic.
Expired token Expiry handling jwt_expired_refresh_token_sample.jwt 351 B Descargar
Service Claims JWT
Targets worker/service auth flows with nested claims and permissions.
Nested claims token Role and nested-claim parsing jwt_service_claims_token_sample.jwt 500 B Descargar
Invalid Signature JWT
Use when you need a structurally correct token that fails signature verification.
Broken token Signature failure jwt_invalid_signature_sample.jwt 347 B Descargar

Packs relacionados

Auth Token Validation Pack

Bundle of real JWT, HTTP, and certificate fixtures for token validation, expiry handling, signature checks, and auth middleware testing.

auth_token_validation_fixture_pack.zip · 5.3 KB

Signed Request Inspection Pack

Bundle of real JWT, COOKIE, HTTP, cURL, PEM, and CRT fixtures for signed-request verification, webhook signature inspection, and auth-request debugging.

signed_request_inspection_fixture_pack.zip · 6.5 KB

Flujos relacionados

Token Validation Fixtures

JWT, HTTP, and certificate fixtures for signature verification, expiry handling, claim inspection, and auth middleware debugging.

Abrir flujo

Signed Request Verification Fixtures

JWT, COOKIE, HTTP, cURL, PEM, and CRT fixtures for signed-request verification, webhook signature debugging, and auth-request inspection.

Abrir flujo