OAuth 2.0 Token Tester

OAuth 2.0 access tokens are credentials used to access protected resources on behalf of a user. They are typically formatted as JSON Web Tokens (JWT) containing claims about the user, permissions, and token metadata such as issuer, audience, and expiration time.

This tool decodes the token locally to reveal its contents — no data is sent to any server. You can inspect standard claims (iss, sub, aud, exp, iat) as well as custom claims specific to your application.

1. Paste your token — Copy an OAuth 2.0 access token (JWT format) and paste it into the input area.
2. Decode — Click Decode Token or press Ctrl+Enter to decode the token and view its contents.
3. Review claims — Check the header (algorithm, type), payload (issuer, subject, audience, expiry, custom claims), and signature.
4. Check validity — The status badge shows whether the token is still valid, expiring soon, or expired based on the exp claim.