v2.0.0

What's New

• JWE (JSON Web Encryption) support — JWE tokens are automatically detected (5 dot-separated parts) and their protected headers displayed. Provide a decryption key with --key/-k to decrypt and view the plaintext payload.
• JWS signature verification — Use --key/-k with a JWT to verify its signature. Displays Signature: VALID or Signature: INVALID with error details. Supports RSA, ECDSA, Ed25519, and HMAC algorithms.
• JWK and JWK Set key format — --key now accepts JWK (JSON Web Key) files and JWK Sets in addition to PEM and DER. For JWK Sets, the first key is used.
• Public key loading — Both private and public keys are supported for all formats (PEM, DER, JWK, base64). Private keys are automatically converted to their public counterpart for signature verification.
• JWTD_KEY environment variable — Set a default key without passing --key on every invocation. The --key flag always takes precedence.
• Nested token detection — Decrypted JWE payloads that are themselves a JWT or another JWE are automatically detected and decoded recursively.
• Interactive prompt updated — Now displays Enter JWT/JWE: to reflect support for both token types.