hmeddeb/parsetoken repository overview

⁠ParseToken

ParseToken is an open source , secure and free app that allows you to parse your token and verify the signature directy and locally .

⁠How to use this image

⁠With an unsecure authentication server (http)

To run the image do :

docker run -d --name parsetoken  -e PUBLIC_KEY_URL=http://SERVERNAME:PORT/path/to/public/key --add-host=SERVERNAME:IP_ADDRESS_OF_SERVER  -p 8080:8080 hmeddeb/parsetoken:latest

The image currently only work on port 8080.

The docker image use an environment variable PUBLIC_KEY_URL to access the public key in the authentication server. For example for keycloak :

PUBLIC_KEY_URL = http://SERVERNAME:PORT/realms/YOUR_REALM/protocol/openid-connect/certs

In the container the ip address associated with the SERVERNAME of the authentication server is not known. You will need to map the SERVERNAME to its ip address by adding this flag :

--add-host=SERVERNAME:IP_ADDRESS_OF_SERVER

⁠With a secure authentication server (https)

To run this image with a secure authentication server do :

docker run -d --name parsetoken  -e PUBLIC_KEY_URL=http://SERVERNAME:PORT/path/to/public/key --add-host=SERVERNAME:IP_ADDRESS_OF_SERVER  -p 8080:8080 -v ./path/to/certificate/authority/locally:/trusted_ca/auth_server_certificate.crt hmeddeb/parsetoken:latest

This image can be used with a secure authentication server but the certificate authority must be provided /trusted_ca/auth_server_certificate.crt in the container. This can be done with a volume by adding this parameter when you run your container :

-v ./path/to/certificate/authority/locally:/trusted_ca/auth_server_certificate.crt

⁠How to use this image

When you paste your token, the header and payload are automatically decoded and displayed. To verify the signature you must click on the "Verifiy signature" button. This image has been tested only for keycloak other authentication server haven't been tested yet.

⁠How this image was build

This image contains a server build with a pure java server and using jakarta.json implemented with org.eclipse.parsson. The front is made with angular. The latest version of this image is build on an alpine image for optimized size and security. The code can be found in GitLab⁠