Create, sign and verify JSON Web Tokens and read their claims from Blueprints or C++, with HMAC (HS256/384/512) and RSA (RS256/384/512) signing.

Long Description:

TokenSmith brings JSON Web Tokens (JWT) to Unreal Engine. Initialize a generator with a secret or an RSA private key, add your claims and call Generate Signed JWT to get a signed token with issued-at, not-before and expiry times. On the other side, initialize a verifier with the matching key, add requirements such as issuer, subject, audience or any custom claim, and Verify JWT tells you whether the token is genuine and still valid.

Everything lives on an engine subsystem, so the same 17 Blueprint nodes and C++ functions work in the editor, in packaged games and on dedicated servers. Get Claims reads every payload claim of a token into a string map for your gameplay or UI code.

Typical uses: a dedicated server that issues short-lived session tokens, a client or server that checks tokens issued by your backend or login service, signed invitation or reward codes, and tools that need to inspect a token's claims.

TokenSmith is part of the Alpha XP utilities collection for Unreal Engine 4.27 and 5.8. Every feature is exposed to Blueprints and C++, it ships with styled HTML documentation, and it is compiled and verified warning-free against clean UE 4.27 and UE 5.8 projects.

Key Features:

- Generate Signed JWT with payload claims, header claims, issued-at, not-before and expiry

- Set Type, Set Content Type, Set Key ID, Set Subject, Set Audience and Set ID for registered claims

- Verify JWT checks signature, algorithm and time window, with the failure reason in the log

- Verification requirements: With Issuer, With Subject, With Audience, With ID, With Custom Claim

- With Leeway for clock differences between machines

- Get Claims returns all payload claims as a string map

- HS256, HS384, HS512 with shared secrets; RS256, RS384, RS512 with PEM keys

- UTF-8 claims and keys

- Engine subsystem: available in editor, game and dedicated server

- Uses the engine's OpenSSL; no network access and no external services

Full documentation: https://demo.alphaxp.net/FabStore/Utilities/TokenSmith/

Support: https://alphaxp.net/