Decode JWT (JSON Web Token) in Apex

-

A little bit about JWT Tokens

JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of a JSON Web Encryption (JWE) structure, enabling the claims to be digitally signed or integrity protected with a Message Authentication Code (MAC) and/or encrypted.

Here's a code snippet to decode a JWT Token

 String tempJWTToken ='eyJraWQiOiIwOE1XOU11bThySnc3VGdpRXM1R3M2ckZBUlpET0dBRyIsImFsZyI6IlJTMjU2In0.eyJkYXRhIjp7ImV4cGlyYXRpb25ZZWFyIjoiMjAyMyIsIm51bWJlciI6IjQxMTExMVhYWFhYWDExMTEiLCJleHBpcmF0aW9uTW9udGgiOiIwMiIsInR5cGUiOiIwMDEifSwiaXNzIjoiRmxleC8wOCIsImV4cCI6MTYyMjY2NzM5MywidHlwZSI6Im1mLTAuMTEuMCIsImlhdCI6MTYyMjY2NjQ5MywianRpIjoiMUUwRVRWVktaNjVGMFpBQlZIQ01CRk1RTExWT0wxUE42REdCTkc1UDFEVlNBWDZQQ1ZaSzYwQjdGMDgxQzhBQ
iIsImNvbnRlbnQiOnsicGF5bWVudEluZm9ybWF0aW9uIjp7ImNhcmQiOnsiZXhwaXJhdGlvblllYXIiOn
sidmFsdWUiOiIyMDIzIn0sIm51bWJlciI6eyJtYXNrZWRWYWx1ZSI6IlhYWFhYWFhYWFhYWDExMTEiLCJi
aW4iOiI0MTExMTEifSwic2VjdXJpdHlDb2RlIjp7fSwiZXhwaXJhdGlvbk1vbnRoIjp7InZhbHVlIjoiM
DIifSwidHlwZSI6eyJ2YWx1ZSI6IjAwMSJ9fX19fQ.ZcnMNGM9WbcZeeZ5jQ1E5kVJbeYDZ2hNjkMW5TVM
gXVXKK6Kg6ms9VCQToJ4DUUvT1pk3jGUDNkPMm0zjEYvbiZKa6R1DncKfEUVbWm1pWB1r6KfxlEVqoFHf2
HT3aSrU8qe_ta-fhQtfTC2A8PcqdqsGS9IOGrsXALhaGKbQMc1k4RI2Sa3NXiXv4xHTiLbcLFqGRIMxj1R
ZOhYfNWo3BX3s-6dNAA11oD_S2LkIS9U223K4ibxVK1US62z9yC89gGOY08VmpdVZ8lwESBgQVEd4zir3e
dcSBOvEw55XEWL94E2AbJI7zr0494r7FWIUH02cpEJGWdPF-FUc-h0yA';

 String jwtTokenbody = tempJWTToken.split('\\.')[1]; Blob decodedJWTToken = EncodingUtil.base64Decode(jwtTokenbody); Map<String, Object> jwtTokenDataMap = (Map<String, Object>)JSON.deserializeUntyped(decodedJWTToken.toString()); String issData = (String)jwtTokenDataMap.get('iss');
System.debug('___Decode issData' + issData); System.debug('___Decode jwtData' + jwtTokenDataMap);


Output

{content={paymentInformation={card={expirationMonth={value=02}, expirationYear={value=2023}, number={bin=411111, maskedValue=XXXXXXXXXXXX1111}, securityCode={}, type={value=001}}}}, data={expirationMonth=02,
expirationYear=2023, number=411111XXXXXX1111, type=001},
exp=1622667393, iat=1622666493, iss=Flex/08, jti=1E0ETVVKZ65F0ZABVHCMBFMQLLVOL1PN6DGBNG5P1DVSAX6PCVZK60B7F081C8AB,
type=mf-0.11.0}

Reference Links








Comments

Post a Comment

Popular posts from this blog

Introduction to Salesforce Agent Script: Build Predictable AI Agents

-
Image
Please visit here for more details - https://ayaninsights.com/guestblogs/introduction-to-agent-script/ In my latest blog, I introduce Salesforce Agent Script and explain how it helps teams build AI agents that are more predictable, controlled, and aligned with business processes. Large language models are flexible, but relying only on natural-language instructions can sometimes produce inconsistent results. Agent Script addresses this challenge by combining the conversational capabilities of an LLM with structured business logic. The blog explains how developers can use conditions, variables, actions, topics, and transitions to control how an Agentforce agent behaves. Agent Script supports familiar logic such as if/else conditions, value comparisons, sequential actions, and checks for missing data. I also cover its core structure, including system settings, configuration, global variables, languages, connections, and topic blocks. The start_agent topic acts as the entry point for each...
Read more

Anti-Patterns in Salesforce Agentforce: What to Avoid When Building AI Agents

-
Image
Salesforce Agentforce is powerful because it allows teams to build AI agents that can understand user intent, retrieve grounded information, execute actions, and support business workflows across Salesforce. But like any powerful platform, the quality of the implementation matters. A good Agentforce implementation does not start with “How many things can the agent do?" It starts with “What problem should the agent solve reliably?” That is where anti-patterns come in. Anti-patterns are common implementation habits that look useful at first but eventually create confusion, poor user experience, inconsistent answers, or hard-to-maintain agents. Below are some of the most common Agentforce anti-patterns and how to avoid them. 1. Trying to Build One Agent That Does Everything One of the biggest mistakes is designing a single agent to handle every business process, every department, and every possible customer question. At first, this feels efficient. One agent, many use cases. Bu...
Read more

MCP vs. Traditional APIs: Choosing the Right Integration Approach

-
Image
Enterprise integration has traditionally been built around APIs. Applications send structured requests, services process them, and predictable responses are returned. This model has supported everything from payment processing and customer portals to mobile applications and large-scale system integrations. The rise of AI agents introduces a different integration challenge. An AI agent does not always follow a fixed sequence designed in advance. It may need to determine which system to use, discover the operations available to it, gather relevant context, and select the appropriate action based on a user’s request. This is where the Model Context Protocol, or MCP, becomes relevant. MCP and traditional APIs are related, but they solve different problems. APIs expose system capabilities. MCP provides a standardized way for AI applications to discover and use those capabilities as tools and contextual resources. Understanding this distinction is important when designing enterprise AI solut...
Read more