stbox.dev

Act as a Relying Party: Auth Code + PKCE, Implicit, Client Credentials — browser-direct first, CORS proxy fallback.

stbox.dev/oauth

Decode, mint, and verify JWTs — HMAC/RSA/ECDSA locally, or auto-fetch issuer JWKS via OIDC discovery.

stbox.dev/jwt

Act as a Service Provider: build AuthnRequests (Redirect/POST) and consume Assertions at /saml/acs.

stbox.dev/saml

Sandbox for passkey registration and authentication — configure ceremonies, inspect AuthData, verify attestation/assertion.

stbox.dev/passkeys

Instantly generate code_verifier and code_challenge pairs for OAuth 2.0 PKCE flows.

stbox.dev/pkce

Parse and inspect Set-Cookie headers, SameSite attributes, and security flags.

stbox.dev/cookie-inspector

Encrypt and decrypt JSON Web Encryption (JWE) payloads using WebCrypto via jose.

stbox.dev/jwe

Compute MD5, SHA-1/256/512, and SHA3 digests for strings or files in the browser.

stbox.dev/hash

Generate RSA, EC, and OKP key pairs as JWK / PEM using WebCrypto.

stbox.dev/jwk-gen

Parse PEM/DER certificates and inspect subject, SAN, and validity locally.

stbox.dev/x509-decoder

Fetch live TLS chain details for any host — protocol, cipher, and expiry.

stbox.dev/ssl-validator

Construct, test, and debug HTTP requests with custom headers, body payloads, and token authorization.

stbox.dev/rest

Test URL embedding, inspect cross-origin postMessage events, and configure sandbox security policies.

stbox.dev/iframe

Connect to WS/WSS streams and Server-Sent Events to send and receive real-time messages.

stbox.dev/websocket

Generate temporary endpoints to catch, inspect, and debug incoming HTTP webhooks.

stbox.dev/webhook

Convert cron expressions to plain language and preview upcoming execution times.

stbox.dev/cron

Generate UUID v4/v7, ULID, and NanoID strings in bulk — entirely in-browser.

stbox.dev/uuid

Bidirectional conversion between YAML, JSON, and TOML with syntax checking.

stbox.dev/yaml-json

Inspect network waterfalls, timings, and payloads from HAR exports — redact secrets and export cURL, all in-browser.

stbox.dev/har

Format and sanitize HTML markup with DOMPurify — nothing leaves your browser.

stbox.dev/html

Pretty-print, minify, validate, and diff JSON documents client-side.

stbox.dev/json

Test, visualize, debug, and explain regular expressions in plain English with instant match highlighting.

stbox.dev/regex

Convert Unix timestamps to local/UTC, measure performance with multi-stopwatches, and set timers.

stbox.dev/time

Convert cURL commands into fetch, Axios, Python, Go, Node, and Java client snippets — client-side.

stbox.dev/curl-converter

Extract timestamps, version, and entropy from UUID v7, ULID, and snowflake IDs.

stbox.dev/id-decoder

Side-by-side GitHub-flavored Markdown editor with HTML copy and print-to-PDF.

stbox.dev/markdown

Convert text and files between Plaintext, Base64, Base64URL, Hex, and Data URIs 100% in your browser.

stbox.dev/base64

Count tokens with js-tiktoken, visualize BPE splits, and estimate cost across major LLM models.

stbox.dev/tokens

Strip boilerplate, collapse whitespace, and redact secrets plus PII (SSN, cards, phones, emails, names) before pasting into LLMs.

stbox.dev/prompt-trim

Format plain text into OpenAI, Anthropic, or Ollama message JSON and validate tool schemas.

stbox.dev/llm-formatter

Test fixed-size, recursive, and markdown header chunking with overlap highlights.

stbox.dev/chunks

Generate scannable QR codes from text or URLs with downloadable PNG output.

stbox.dev/qr

Crop photos to official passport/visa ratios (US, IN, UK, EU) on canvas.

stbox.dev/passport-photo