Skip to content
Browse all functions

Decode JWT – Read and Verify a JSON Web Token

data/jwtdecode

jwtdecode (Decode JWT – Read and Verify a JSON Web Token) is a 1001fx API function in the group Data & JSON: POST https://api.1001fx.com/data/jwtdecode, 1 credit per call. It works as a ready-made module in Make or as a plain HTTP call.

1 credit per callHTTP APIMake

Reads header and payload of a JSON Web Token. With a secret or public key it also verifies the signature (HS256/384/512, RS256/384/512); expired (exp) and not-yet-valid (nbf) tokens are reported. "none" tokens never count as verified.

Endpoint

POSThttps://api.1001fx.com/data/jwtdecode
Header
X-API-KEY: YOURSECRETAPIKEY How to
Content type
application/json

Parameters

  • tokenstringrequired

    The JSON Web Token.

    Example:
    eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOjQyLCJyb2xlIjoiZWRpdG9yIn0.Z-hOPw5By6U56in1QdKNrcmRQb2WWqWtwK8lpt1PRKY
  • secretstringoptional

    Optional: shared secret (HS*) or PEM public key (RS*) to verify the signature.

Examples

Decode JWT – Read and Verify a JSON Web Token

Decode JWT – Read and Verify a JSON Web Token

Input

Expects a json body
{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOjQyLCJyb2xlIjoiZWRpdG9yIn0.Z-hOPw5By6U56in1QdKNrcmRQb2WWqWtwK8lpt1PRKY",
  "secret": "my-shared-secret"
}

Output · HTTP 200

Response
{
  "statusCode": 200
}
Show curl command
curl -X POST 'https://api.1001fx.com/data/jwtdecode' \
  -H 'X-API-KEY: YOURSECRETAPIKEY' \
  -H 'Content-Type: application/json' \
  -d '{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOjQyLCJyb2xlIjoiZWRpdG9yIn0.Z-hOPw5By6U56in1QdKNrcmRQb2WWqWtwK8lpt1PRKY","secret":"my-shared-secret"}'

Try jwtdecode now

Run it in your browser or create a free account and get 100 credits every month.

Changelog

  • 1.0.001.11.2026created