JWT Token Fixture Matrix
Choose JWT fixtures for valid access tokens, expired refresh tokens, nested service claims, and invalid-signature auth debugging.
How to Use This Matrix
- Separates valid, expired, nested-claim, and invalid-signature token cases.
- Useful for auth middleware, API gateways, and token-inspection tooling.
- Anchored to auth-token and signed-request packs.
Open Primary Library
This matrix is anchored to the JWT library page and its manifest.
Fixture Rows
| Variant | Profile | Test Focus | File | Size | Download |
|---|---|---|---|---|---|
|
HS256 Access JWT
Good baseline for middleware and authz checks against a current signed access token.
|
Valid access token | Claim and signature validation | jwt_hs256_access_token_sample.jwt |
365 B | Download |
|
Expired Refresh JWT
Useful for token lifetime checks and refresh-path rejection logic.
|
Expired token | Expiry handling | jwt_expired_refresh_token_sample.jwt |
351 B | Download |
|
Service Claims JWT
Targets worker/service auth flows with nested claims and permissions.
|
Nested claims token | Role and nested-claim parsing | jwt_service_claims_token_sample.jwt |
500 B | Download |
|
Invalid Signature JWT
Use when you need a structurally correct token that fails signature verification.
|
Broken token | Signature failure | jwt_invalid_signature_sample.jwt |
347 B | Download |
Related Packs
Auth Token Validation Pack
Bundle of real JWT, HTTP, and certificate fixtures for token validation, expiry handling, signature checks, and auth middleware testing.
auth_token_validation_fixture_pack.zip · 5.3 KB
Signed Request Inspection Pack
Bundle of real JWT, COOKIE, HTTP, cURL, PEM, and CRT fixtures for signed-request verification, webhook signature inspection, and auth-request debugging.
signed_request_inspection_fixture_pack.zip · 6.5 KB
Related Workflows
Token Validation Fixtures
JWT, HTTP, and certificate fixtures for signature verification, expiry handling, claim inspection, and auth middleware debugging.
Open WorkflowSigned Request Verification Fixtures
JWT, COOKIE, HTTP, cURL, PEM, and CRT fixtures for signed-request verification, webhook signature debugging, and auth-request inspection.
Open Workflow