La brecha que resuelve

JWT decoding in the IDE is not a new idea -- the long-standing option is JWT (JSON Web Token) Analyzer (75,144 downloads, free). Two things led to this plugin, checked again in September 2026:

Algorithm coverage. The incumbent verifies HS256, HS384 and RS256. This plugin verifies all twelve JWS algorithms the JDK implements: HS256/384/512, RS256/384/512, PS256/384/512 and ES256/384/512. ECDSA (the ES* family, used by most OIDC providers that moved off RSA) and RSA-PSS are the practical gaps.
A token with many claims stays readable. Header and payload each get their own scrolling panel with one row per claim, checked by an automated test (JwtDecoderPanelTest) that decodes a real 17-claim token and asserts every claim gets a row.

What the incumbent has and this plugin does not: editing claim values, a default keypair stored in Preferences, and relative-time rendering. If those matter more than algorithm coverage, it is the better tool.

Datos y precio

Categoría: Seguridad
Precio: Gratis
Plataforma: IntelliJ-family plugin
Primera publicación: 2026-08-27
ID en Marketplace: #33316
Repositorio: jwt-companion
Crecimiento: ▲ +412.8% desde el 2026-08-18 (39→200)

Plugins relacionados

Todos los plugins de seguridad

Freemium

API Security Companion

API Security

Lightweight, 100% local API-security checks for Java and Kotlin: hardcoded secrets, plaintext HTTP, TLS misconfiguration, and OWASP API Security Top 10 patterns.

246 descargasDetalles

Gratis

Cert Companion

Certificates / X.509

A native, client-side viewer for X.509 certificates and keystores: decode a .pem, .crt, .cer, .der, .jks, .p12, or .pfx file without leaving the IDE.

185 descargasDetalles

Gratis

Dependency Vulnerability Companion

Dependency / SCA Security

Flags known-vulnerable dependency versions directly in pom.xml, build.gradle(.kts), package.json, and requirements.txt, matched against a vulnerability database bundled inside the plugin: zero account, zero token, zero network call, ever.

171 descargasDetalles

Gratis

SQL String Concatenation Companion

SQL Injection Detection

Flags SQL queries built by unparameterized string concatenation or interpolation (the classic SQL-injection shape) across Java, Kotlin, and Python, and offers a real quick-fix toward parameterization. Deliberately narrow (not a full SAST scanner like Qodana): one specific pattern, near-zero configuration, tuned hard against false positives.

145 descargasDetalles

¿Necesitas una herramienta así hecha para tu código?Reglas de análisis estático a medida, integración con CI/CD, distribución privada de plugins y auditorías de rendimiento para plugins IntelliJ.

Trabaja con Joel

Descargas y estrellas al 2026-10-18, actualizadas dos veces al día desde las API de JetBrains Marketplace y GitHub.