# JWT Token Harvester v2

A Chrome extension for capturing JWT tokens from QA environments during development and testing.

## Installation

1. Open Chrome and navigate to `chrome://extensions`
2. Enable **Developer mode** (toggle in top-right corner)
3. Click **Load unpacked**
4. Select the `qa-jwt-grabber` directory
5. The extension icon should appear in your Chrome toolbar

## Usage

### Capturing Tokens

1. Navigate to one of the supported QA environments:
   - `https://insights.qaorch.com`
   - `https://qa-ows-grass.theorchard.io`

2. The extension automatically intercepts JWT tokens from:
   - Fetch API requests
   - XMLHttpRequest calls
   - Direct browser requests

3. When a token is captured, the extension badge will show ✓

### Viewing & Copying Tokens

1. Click the extension icon in your toolbar
2. The popup displays:
   - Token preview (truncated for security)
   - Expiry time and countdown
   - Permissions/grants from the token
   - Capture timestamp

3. Click **Copy Token** to copy the full JWT to your clipboard

### Token Expiry

- The extension automatically detects expired tokens
- Expired tokens show ⚠ on the badge
- Click **Refresh Page** to reload and capture a new token

## Security Notice

**For development/testing only.** Tokens are stored locally and never transmitted outside the extension. Only works with specified QA domains.