CODEWITHSUNDEEP
pythonjwt
salveiro
salveiro

Reputation: 509

Getting only decoded payload from JWT in python

Is there a nice way (using maybe some library) to get only payload from JWT saved as string variable? Other than manually parsing it for content between first and second dots and then decoding.

Upvotes: 39

Views: 99826

Answers (3)

lollerskates
lollerskates

Reputation: 1147

the accepted answer is a bit outdated now. As of this writing jwt==1.3.1 and there are slight changes to the library. You should do

from jwt import JWT
instance=JWT()
token="my.token.secret"
instance.decode(token, do_verify=False)  # only if you do not want to perform a verification

Upvotes: 0

Arindam Roychowdhury
Arindam Roychowdhury

Reputation: 6493

I used it today and seems like it needs the algorithm used too:

token = jwt.encode(payload, key=JWT_SECRET, algorithm="HS512")

jwt.decode(token, algorithms='HS512', verify=True, key=JWT_SECRET)
{'id': '1', 'email': '[email protected]'}

Upvotes: 3

jps
jps

Reputation: 22465

The library PyJWT has an option to decode a JWT without verification:

Without this option, the decode function does not only decode the token but also verifies the signature and you would have to provide the matching key. And that's of course the recommended way.
But if you, for whatever reason, just want to decode the payload, set the option verify_signatureto false.

import jwt
key='super-secret'
payload={"id":"1","email":"[email protected]" }
token = jwt.encode(payload, key)
print (token)
decoded = jwt.decode(token, options={"verify_signature": False}) # works in PyJWT >= v2.0
print (decoded)
print (decoded["email"])

For PyJWT < v2.0 use:

decoded = jwt.decode(token, verify=False)  # works in PyJWT < v2.0

It returns a dictionary so that you can access every value individually:

b'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpZCI6IjEiLCJlbWFpbCI6Im15ZW1haWxAZ21haWwuY29tIn0.ljEqGNGyR36s21NkSf3nv_II-Ed6fNv_xZL6EdbqPvw'

{'id': '1', 'email': '[email protected]'}

[email protected]

Note: there are other JWT libs for python as well and this might also be possible with other libs.

Upvotes: 99

Related Questions