HALOWERKSicherwerk
jwt verify
Decodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: HMAC with a shared secret, or RSA, RSA-PSS and ECDSA against a PEM key or a JWKS you point at, with the kid matched to the right key.
POST https://sicher.halowerk.com/v1/jwt-verifyEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| token | string | Ja | The JWT in compact form. |
| secret | string | Nein | Shared secret for HS256/384/512. |
| public_key_pem | string | Nein | PEM public key for RS/PS/ES algorithms. |
| jwks_url | string | Nein | JWKS endpoint; the key is picked by kid. |
| expected_issuer | string | Nein | Issuer the token must carry. |
| expected_audience | string | Nein | Audience the token must name. |
| clock_skew_seconds | integer | Nein | Tolerance for exp and nbf. |
| max_lifetime_seconds | integer | Nein | Flag tokens valid for longer than this. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"token"
],
"additionalProperties": false,
"properties": {
"token": {
"type": "string",
"minLength": 10,
"maxLength": 20000,
"description": "The JWT in compact form."
},
"secret": {
"type": "string",
"maxLength": 2000,
"description": "Shared secret for HS256/384/512."
},
"public_key_pem": {
"type": "string",
"maxLength": 8000,
"description": "PEM public key for RS/PS/ES algorithms."
},
"jwks_url": {
"type": "string",
"maxLength": 2000,
"description": "JWKS endpoint; the key is picked by kid."
},
"expected_issuer": {
"type": "string",
"maxLength": 500,
"description": "Issuer the token must carry."
},
"expected_audience": {
"type": "string",
"maxLength": 500,
"description": "Audience the token must name."
},
"clock_skew_seconds": {
"type": "integer",
"minimum": 0,
"maximum": 3600,
"default": 60,
"description": "Tolerance for exp and nbf."
},
"max_lifetime_seconds": {
"type": "integer",
"minimum": 1,
"description": "Flag tokens valid for longer than this."
}
}
}Veröffentlichtes Eingabebeispiel
{
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL2V4YW1wbGUuaW52YWxpZC9oYWxvd2Vyay1zeW50aGV0aWMiLCJzdWIiOiJzeW50aGV0aWMtZXhhbXBsZSIsImF1ZCI6InN5bnRoZXRpYy1leGFtcGxlIiwiaWF0Ijo5NDY2ODQ4MDAsImV4cCI6OTQ2Njg4NDAwfQ.RyBcYWZR8Bd7xTj_QqASWo1SGVw16vZR2EhIG6tAjiw",
"secret": "HALOWERK-public-synthetic-example-never-use-for-authentication",
"expected_issuer": "https://example.invalid/halowerk-synthetic",
"expected_audience": "synthetic-example"
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://sicher.halowerk.com/v1/jwt-verify/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
cve check
POSThttps://sicher.halowerk.com/v1/cve-checkQueries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and
- Sicherwerk0,005 USDC
hash reputation
POSThttps://sicher.halowerk.com/v1/hash-reputationQueries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict.