jwt-security-analyzer

JWT token security analysis and vulnerability detection for Node.js applications.

Features

• Detects algorithm confusion (alg: none)
• Validates token structure (3-part base64url)
• Checks expiration (exp) and not-before (nbf)
• Reports missing expiration as medium severity
• No external JWT lib — self-contained parsing

Install

npm install jwt-security-analyzer

Usage

import { analyze } from 'jwt-security-analyzer';

const result = analyze(tokenString);
if (!result.valid) {
  console.error(result.issues);
}

License

MIT