JWT Decode

Decode JWTs from the terminal. See what's inside, check if expired.

Installation

npm install -g @lxgicstudios/jwt-decode

Commands

Decode Token

npx @lxgicstudios/jwt-decode eyJhbGciOiJIUzI1NiIs...

# Works with Bearer prefix
npx @lxgicstudios/jwt-decode "Bearer eyJhbGci..."

From Environment Variable

echo $AUTH_TOKEN | npx @lxgicstudios/jwt-decode

From File

npx @lxgicstudios/jwt-decode -f token.txt

Check if Expired

npx @lxgicstudios/jwt-decode --check $TOKEN && echo "Valid" || echo "Expired"

Extract Specific Claim

npx @lxgicstudios/jwt-decode -c sub $TOKEN
npx @lxgicstudios/jwt-decode -c email $TOKEN

Example Output

Header
──────
  alg: "HS256"
  typ: "JWT"

Payload
───────
  sub: "1234567890"
  name: "John Doe"
  email: "john@example.com"
  iat: 1706547200 (2024-01-29T16:00:00.000Z)
  exp: 1706633600 (2024-01-30T16:00:00.000Z)

Status
──────
  Valid - expires in 23 hours

Options

Common Use Cases

Debug auth token:

npx @lxgicstudios/jwt-decode $AUTH_TOKEN

Get user ID from token:

npx @lxgicstudios/jwt-decode -c sub $TOKEN

Use in scripts:

if npx @lxgicstudios/jwt-decode --check $TOKEN 2>/dev/null; then
  echo "Token valid"
else
  echo "Token expired, refreshing..."
fi

Features

• Colored, readable output
• Automatic Bearer prefix handling
• Human-readable expiration times
• Timestamp conversion
• Script-friendly exit codes
• JSON output mode

---

Built by LXGIC Studios

🔗 GitHub · Twitter