JWT-based stateless authentication service. Supports HS256 token signing. All admin routes require a valid admin-role token.
/api.php?action=loginAuthenticate and receive a JWT. Body: {"user":"...","pass":"..."}
/api.php?action=profileView your decoded token claims. Header: Authorization: Bearer <token>
/api.php?action=adminAdmin-only endpoint. Requires a token with role: admin. Returns maintenance credentials.
Use the credentials below to get started:
guestGu3stP4ss!
(response will appear here)
curl -s 'http://TARGET/api.php?action=profile' \ -H 'Authorization: Bearer YOUR_TOKEN_HERE'
Jailkey v2.1 — Internal Auth Service — Powered by custom JWT library
Contact: auth-team@corp.local