Decode JWT claims

Decode payload to inspect exp/iss/aud; note: fixes base64url, skips sig check

cut -d. -f2 <<<"$JWT" | tr '_-' '/+' | base64 -d 2>/dev/null | jq .
tool
troubleshooting32 commands
tags
troubleshootingsecuritysecretsapi

More troubleshooting commands

  • List gRPC services via reflection
    grpcurl -plaintext <host>:<port> list; grpcurl -plaintext <host>:<port> describe <svc>

    Enumerate services/methods over reflection; -plaintext skips TLS for debug

  • Per-thread CPU breakdown
    pidstat -t -p <pid> 1

    Per-thread CPU%, find the hot TID inside a busy process for jstack/perf

  • Hot thread live view
    top -H -p <pid>

    Live per-thread view; convert hot TID to hex (printf %x) to match jstack nid

  • Per-core CPU saturation
    mpstat -P ALL 1

    Per-core %usr/%sys/%iowait — spot a single saturated core vs balanced load

  • Run-queue vs cores
    vmstat 1 5 | awk 'NR>2{print "runq="$1" blocked="$2}'; nproc

    vmstat r column (runnable) above nproc means CPU saturation, not just high load

all 32 troubleshooting commands