See inside the JWT
Suppose you want to quickly check out what kind of data you get from one of the login methods provided by Criipto. You can do this by inspecting the contents of the JSON Web Token, JWT, issued when you log in.
A quick option is to do a login and send the result to a preexisting JWT viewer, in this case jwt.io. The site is developed and maintained by our friends at Auth0.
The JWT viewer will serve as a substitute for your app, so you don’t have to stand one up just for getting a feel of the login.
The steps to set it up in your Criipto tenant are:
- Register jwt.io as an application
- Piece together the request that will trigger the login
- Perform the login and inspect the result
Register jwt.io as an application
To use jwt.io to view your tokens, you must first register it as an application in Criipto Verify. Go to the Applications section and create a new application:
- Choose a domain, probably the one already there if you a just starting to use Criipto Verify
- As Client ID change the prefilled value with
urn:debugger:jwtto make it easier to set up the URL below
- As Callback URL enter
- Enable all the identity sources you like to try out.
That’s it for configuring Criipto Verify.
Piece together the login request
Next, you need the following two pieces of information from Criipto Verify for putting together the URL for the login request:
- Domain on which you will be communicating with Criipto Verify. This could be, for example,
- Client ID to identify your application to Criipto Verify. We chose
A login request uses a standard protocol, OAuth2. For this example it will be
Log in and inspect the result
Just copy the URL from above and change two values:
- Replace YOUR-DOMAIN with the value you selected when registering jwt.io as an application
- Replace the value of the query parameter
acr_valueswith your choice of e-ID from the list.
Copy this modified URL and put it in your browser to complete a login.
Note that you will need a test user account, some of which are easier to come by than others. You can see how in the article on test users.