JWT Token Fixture Matrix
Choose JWT fixtures for valid access tokens, expired refresh tokens, nested service claims, and invalid-signature auth debugging.
Comment utiliser cette matrice
- Separates valid, expired, nested-claim, and invalid-signature token cases.
- Useful for auth middleware, API gateways, and token-inspection tooling.
- Anchored to auth-token and signed-request packs.
Ouvrir la bibliotheque principale
Cette matrice est rattachee a la bibliotheque JWT et a son manifeste.
Lignes de fixtures
| Variante | Profil | Objectif de test | Fichier | Taille | Telecharger |
|---|---|---|---|---|---|
|
HS256 Access JWT
Good baseline for middleware and authz checks against a current signed access token.
|
Valid access token | Claim and signature validation | jwt_hs256_access_token_sample.jwt |
365 B | Telecharger |
|
Expired Refresh JWT
Useful for token lifetime checks and refresh-path rejection logic.
|
Expired token | Expiry handling | jwt_expired_refresh_token_sample.jwt |
351 B | Telecharger |
|
Service Claims JWT
Targets worker/service auth flows with nested claims and permissions.
|
Nested claims token | Role and nested-claim parsing | jwt_service_claims_token_sample.jwt |
500 B | Telecharger |
|
Invalid Signature JWT
Use when you need a structurally correct token that fails signature verification.
|
Broken token | Signature failure | jwt_invalid_signature_sample.jwt |
347 B | Telecharger |
Packs lies
Auth Token Validation Pack
Bundle of real JWT, HTTP, and certificate fixtures for token validation, expiry handling, signature checks, and auth middleware testing.
auth_token_validation_fixture_pack.zip · 5.3 KB
Signed Request Inspection Pack
Bundle of real JWT, COOKIE, HTTP, cURL, PEM, and CRT fixtures for signed-request verification, webhook signature inspection, and auth-request debugging.
signed_request_inspection_fixture_pack.zip · 6.5 KB
Flux lies
Token Validation Fixtures
JWT, HTTP, and certificate fixtures for signature verification, expiry handling, claim inspection, and auth middleware debugging.
Ouvrir le fluxSigned Request Verification Fixtures
JWT, COOKIE, HTTP, cURL, PEM, and CRT fixtures for signed-request verification, webhook signature debugging, and auth-request inspection.
Ouvrir le flux