Unsigned and SAMPLE-signed JWT variants plus JWKS documents, published sample material only, for auth parser tests.
Each card starts with one representative test file. Choose a use case, search, or filter to find a specific profile; a card’s variant menu contains its related samples.
17 test families · 47 available files · Page 1 of 1
Provenance
A DSSE envelope whose base64 payload decodes to the SLSA v1 statement in this family: the wrapper attestation tooling actually transports. Signatures, key ids and certificates here are SAMPLE placeholders: the base64 dec
Jwks
Empty JWKS keys array for edge-case JWKS loaders.
Jwt
SAMPLE HS256 JWT with a past exp claim, for expiry-validation harnesses.
Jwt
SAMPLE JWT with alg=HS256 for auth parsers and algorithm-handling tests. Published sample material only.
Jwt
JWT Header Claims (RS256 SAMPLE) unsigned JSON companion for claim-parser tests (not a live token).
Jwt
Intentionally invalid JWT (truncated) for parser error-path tests.
Oauth
SAMPLE OAuth device-authorization response for device-flow client tests.
Oauth
OAuth 2.0 SAMPLE error JSON (insufficient_scope) for client error-path tests.
Oauth
SAMPLE OAuth error JSON for token-endpoint failure handling.
Oauth
SAMPLE RFC 7662-style token introspection response for auth middleware tests.
Oauth
SAMPLE OAuth 2.0 token endpoint JSON with access, refresh, and id_token fields.
Oauth
SAMPLE OpenID Connect discovery document for OIDC client and metadata parsers.
Jwks
A single P-256 public JWK. Its x and y are fixed 32-byte base64url values, left-padded when a coordinate happens to be short: the padding rule that libraries stripping leading zeroes get wrong.
Jwks
A JWK Set whose keys carry no kid at all, which RFC 7517 permits. Verifiers must then fall back to trying candidates by algorithm, and the ones that index the set by kid alone find nothing.
Jwt
The single-signature flattened JSON form of the exact same RS256 token shipped in compact serialization. Both encodings must verify to the identical payload, which is the round-trip this pair is for.
Jwt
An EdDSA (Ed25519) token with a fixed 64-byte signature and the same claim set as the RS256 reference. EdDSA signing is deterministic, so this token is reproducible in a way an ES256 one could never be.
Pki
The SAMPLE leaf's public key as a bare SubjectPublicKeyInfo (BEGIN PUBLIC KEY): the form JWT verifiers and most language runtimes expect when you hand them a key rather than a certificate.
