Recipes

Decode a JWT, inspect its claims, and verify the signature — the fastest path from an opaque bearer token to understanding what it grants.

Some tokens are Base64-encoded JSON, or a JWT wrapped in another encoding. Strip the layers one at a time to reach the payload.

Make two requests, format the JSON, then diff them side-by-side to spot schema changes, missing fields, or unexpected values.

Build the right Access-Control-* headers for your use-case, then drop the generated snippet into your server config.

Check which security headers your server returns, build a Content Security Policy from scratch, and verify your CORS setup — all without leaving the app.

Generate a changelog from your commits, bump the semver, write a conventional commit message — everything needed to ship a clean release.

Pick a palette, check accessibility contrast ratios, then export as CSS custom properties ready to drop into any project.

Create a cryptographically strong secret key, hash it for safe storage, and produce a Base64 representation for use in HTTP headers.

API query params, OAuth state values, and webhook payloads are often URL-encoded AND Base64-encoded. Strip both layers to see the raw data.

Create realistic fake records, validate them against a schema, then export as CSV or JSON for use in tests, demos, or seed scripts.

Step through the network stack: check DNS propagation, verify the TLS certificate, inspect security headers, and look up HTTP status codes.

Build the cron expression visually, verify the schedule with the calendar heat-map, then write a commit message documenting the change.