jwt-doctor

JWT/JWE/token security & forensics: alg:none, key-confusion, secret-crack, CVEs, forgery proof.