{
  "version": 1,
  "workflows": [
    {
      "id": "F591BDFC-E479-4C8C-A4A2-9026709D631D",
      "workflowVersion": 1,
      "name": "JWT Inspector",
      "summary": "Decode JWT · Signature not verified",
      "symbolName": "checkmark.seal",
      "isEnabled": true,
      "requiresTrustConfirmation": false,
      "sortOrder": 0,
      "mode": "scriptFilter",
      "supportedTypes": [
        "text"
      ],
      "script": {
        "source": "inline",
        "code": "ObjC.import(\"Foundation\");\n\nfunction readJSON() {\n    var data = $.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile;\n    var text = $.NSString.alloc.initWithDataEncoding(data, $.NSUTF8StringEncoding);\n    if (!text) throw new Error(\"Workflow input is not valid UTF-8\");\n    return JSON.parse(text.js);\n}\n\nfunction writeJSON(value) {\n    var text = JSON.stringify(value);\n    var data = $(text).dataUsingEncoding($.NSUTF8StringEncoding);\n    $.NSFileHandle.fileHandleWithStandardOutput.writeData(data);\n}\n\nfunction textResult(value) {\n    writeJSON({\n        version: 1,\n        result: {\n            type: \"text\",\n            value: String(value)\n        }\n    });\n}\n\nfunction filesResult(paths) {\n    writeJSON({\n        version: 1,\n        result: {\n            type: \"files\",\n            paths: paths\n        }\n    });\n}\n\nfunction preview(value) {\n    var compact = String(value).replace(/\\s+/g, \" \").trim();\n    return compact.length > 90 ? compact.slice(0, 87) + \"...\" : compact;\n}\n\nfunction normalizedLineEndings(value) {\n    return String(value).replace(/\\r\\n?/g, \"\\n\");\n}\n\nfunction fileRepresentations(payload) {\n    var items = (payload.paste && payload.paste.representations) || [];\n    return items.filter(function (item) {\n        return item.path && String(item.path).length > 0;\n    });\n}\n\nfunction inputFileRepresentations(payload, allowedTypes) {\n    var pasteType = payload.paste && payload.paste.type;\n    if (allowedTypes.indexOf(pasteType) < 0) return [];\n    return fileRepresentations(payload);\n}\n\nfunction firstInputFile(payload, allowedTypes) {\n    var files = inputFileRepresentations(payload, allowedTypes);\n    return files.length ? files[0] : null;\n}\n\nfunction readFileData(filePath) {\n    var data = $.NSData.dataWithContentsOfFile($(filePath));\n    if (!data) throw new Error(\"Unable to read input file\");\n    return data;\n}\n\nfunction utf8String(data) {\n    var text = $.NSString.alloc.initWithDataEncoding(data, $.NSUTF8StringEncoding);\n    return text ? text.js : null;\n}\n\nfunction readFileText(filePath) {\n    var text = utf8String(readFileData(filePath));\n    if (text === null) throw new Error(\"Input file is not valid UTF-8 text\");\n    return text;\n}\n\nfunction safeFileName(value) {\n    var name = String(value || \"output\").split(\"/\").pop();\n    name = name.replace(/[:\\u0000-\\u001f]/g, \"-\");\n    return name || \"output\";\n}\n\nfunction uniqueFileName(prefix, extensionName) {\n    var timestamp = Math.floor(Date.now() / 1000);\n    var suffix = $.NSUUID.UUID.UUIDString.js.slice(0, 8).toLowerCase();\n    return prefix + \"-\" + timestamp + \"-\" + suffix + \".\" + extensionName;\n}\n\nfunction outputPath(payload, fileName) {\n    return payload.directories.output + \"/\" + safeFileName(fileName);\n}\n\nfunction runTask(executable, arguments) {\n    var task = $.NSTask.alloc.init;\n    var outputPipe = $.NSPipe.pipe;\n    var errorPipe = $.NSPipe.pipe;\n    task.launchPath = executable;\n    task.arguments = $(arguments);\n    task.standardOutput = outputPipe;\n    task.standardError = errorPipe;\n    task.launch;\n    task.waitUntilExit;\n\n    var stdoutData = outputPipe.fileHandleForReading.readDataToEndOfFile;\n    var stderrData = errorPipe.fileHandleForReading.readDataToEndOfFile;\n    var stdoutText = $.NSString.alloc.initWithDataEncoding(\n        stdoutData,\n        $.NSUTF8StringEncoding\n    );\n    var stderrText = $.NSString.alloc.initWithDataEncoding(\n        stderrData,\n        $.NSUTF8StringEncoding\n    );\n    return {\n        status: Number(task.terminationStatus),\n        stdout: stdoutText ? stdoutText.js : \"\",\n        stderr: stderrText ? stderrText.js : \"\"\n    };\n}\n\nfunction decodeBase64URL(segment) {\n    if (!/^[A-Za-z0-9_-]+$/.test(segment)) {\n        throw new Error(\"JWT contains invalid Base64URL data\");\n    }\n    var value = segment.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    while (value.length % 4 !== 0) value += \"=\";\n    var data = $.NSData.alloc.initWithBase64EncodedStringOptions($(value), 0);\n    if (!data) throw new Error(\"JWT contains invalid Base64URL data\");\n    var text = $.NSString.alloc.initWithDataEncoding(data, $.NSUTF8StringEncoding);\n    if (!text) throw new Error(\"JWT section is not valid UTF-8\");\n    return text.js;\n}\n\nfunction isJSONObject(value) {\n    return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction parseJWT(input) {\n    var token = String(input || \"\").trim();\n    var parts = token.split(\".\");\n    if (parts.length !== 3 || !parts[0] || !parts[1]) return null;\n    if (!/^[A-Za-z0-9_-]*$/.test(parts[2])) return null;\n    try {\n        var header = JSON.parse(decodeBase64URL(parts[0]));\n        var payload = JSON.parse(decodeBase64URL(parts[1]));\n        if (!isJSONObject(header) || !isJSONObject(payload)) return null;\n        return {\n            header: header,\n            payload: payload\n        };\n    } catch (error) {\n        return null;\n    }\n}\n\nfunction expirationResult(value) {\n    var seconds = Number(value);\n    if (!isFinite(seconds)) throw new Error(\"JWT expiration claim is invalid\");\n    var date = new Date(seconds * 1000);\n    if (isNaN(date.getTime())) throw new Error(\"JWT expiration claim is invalid\");\n    var status = date.getTime() <= Date.now() ? \"Expired\" : \"Not expired\";\n    return \"Expiration: \" + date.toISOString() + \"\\nStatus: \" + status;\n}\n\nfunction main() {\n    var payload = readJSON();\n    var input = (payload.paste && payload.paste.text) || \"\";\n    var jwt = parseJWT(input);\n\n    if (payload.phase === \"filter\") {\n        var actions = [];\n        if (jwt) {\n            actions = [\n                {\n                    id: \"decodeHeader\",\n                    title: \"Decode Header\",\n                    subtitle: \"JSON · Signature not verified\",\n                    icon: \"doc.text.magnifyingglass\",\n                    argument: { operation: \"decodeHeader\" }\n                },\n                {\n                    id: \"decodePayload\",\n                    title: \"Decode Payload\",\n                    subtitle: \"Claims as formatted JSON · Signature not verified\",\n                    icon: \"curlybraces\",\n                    argument: { operation: \"decodePayload\" }\n                },\n                {\n                    id: \"decodeAll\",\n                    title: \"Decode Header & Payload\",\n                    subtitle: \"Combined JSON · Signature not verified\",\n                    icon: \"square.stack.3d.up\",\n                    argument: { operation: \"decodeAll\" }\n                }\n            ];\n            if (jwt.payload.exp !== undefined && isFinite(Number(jwt.payload.exp))) {\n                actions.push({\n                    id: \"showExpiration\",\n                    title: \"Show Expiration Time\",\n                    subtitle: \"Expiration status · Signature not verified\",\n                    icon: \"clock\",\n                    argument: { operation: \"showExpiration\" }\n                });\n            }\n        }\n        writeJSON({ version: 1, actions: actions });\n        return;\n    }\n\n    if (payload.phase === \"execute\") {\n        if (!jwt) throw new Error(\"Input is not a valid three-part JWT\");\n        var operation = (payload.argument && payload.argument.operation) || payload.actionID;\n        if (operation === \"decodeHeader\") {\n            textResult(JSON.stringify(jwt.header, null, 2));\n        } else if (operation === \"decodePayload\") {\n            textResult(JSON.stringify(jwt.payload, null, 2));\n        } else if (operation === \"decodeAll\") {\n            textResult(JSON.stringify({ header: jwt.header, payload: jwt.payload }, null, 2));\n        } else if (operation === \"showExpiration\") {\n            if (jwt.payload.exp === undefined) throw new Error(\"JWT has no expiration claim\");\n            textResult(expirationResult(jwt.payload.exp));\n        } else {\n            throw new Error(\"Unknown JWT action\");\n        }\n        return;\n    }\n    throw new Error(\"Unsupported workflow phase\");\n}\n\nmain();\n",
        "scriptPath": "",
        "interpreterPath": "/usr/bin/osascript",
        "arguments": [
          "-l",
          "JavaScript"
        ],
        "workingDirectory": "",
        "filterTimeout": 5,
        "executeTimeout": 5
      }
    }
  ]
}