Visit a website which contains JWT tokens in local storage and click the extension button (key icon).
If a single token was found it is copied directly into the clipboard.
If multiple tokens were found you can select which one you would like to copy.
Pages using MSAL.js v3+ automatically encrypt tokens in localStorage. The extension detects and decrypts these tokens transparently using the session encryption key that MSAL stores in the msal.cache.encryption cookie.
Both idToken (user identity) and accessToken (API authorization) are extracted and labeled in the selection modal. Decryption requires the browser session to still be active — MSAL removes the encryption key cookie when the browser closes.
Instructions
-
Build
npm run dist
-
Manually install extension to Google Chrome, using
distdirectory. -
Open
test.htmlin Google Chrome and run extension -
Modify code and
npm run buildto see changes
single token:
multiple token:
local storage:
