A Microsoft Edge browser extension that automatically extracts and copies Bearer tokens from HTTP requests to your clipboard, with JWT decoding and analysis.
Disclaimer: 99% of the code and document has been generated using AI.
- One-click extraction - Automatically copies the latest Bearer token to clipboard when you click the extension icon
- JWT Analysis - Intelligently decodes JWT tokens and displays claims, expiration times, and token details
- Smart timing - Shows token creation time, expiration status, and remaining validity
- Auto-close - Popup automatically closes after 5 seconds (hover to prevent)
- Debug mode - Shows request monitoring statistics when no tokens are found
- Request history - Tracks recent requests with Bearer tokens
- Download or clone this repository
- Open Microsoft Edge and navigate to
edge://extensions/
- Enable "Developer mode" (toggle in the left sidebar)
- Click "Load unpacked"
- Select the
src/
folder from this repository - The extension should now appear in your toolbar!
- Download the latest
.zip
file from the Releases section - Extract the zip file
- Follow steps 2-5 from the "From Source" instructions above
- Navigate to any website that makes authenticated API calls (web apps, dashboards, etc.)
- Perform actions that trigger HTTP requests (login, navigate, submit forms)
- Click the extension icon in your toolbar
- Token automatically copied! The Bearer token is instantly copied to your clipboard
- View token details - If it's a JWT, see decoded claims, expiration time, and more
- JWT (JSON Web Tokens) - Full decoding with claims analysis
- Generic Bearer tokens - Raw token extraction and display
- Any Authorization header - Automatic Bearer token detection
- Microsoft Edge (latest version)
- Basic knowledge of JavaScript and browser extensions
-
Clone the repository
git clone https://github.com/yourusername/bearer-token-extractor.git cd bearer-token-extractor
-
Load in Edge (follow installation steps above using the
src/
folder) -
Make changes to files in the
src/
directory -
Reload extension in
edge://extensions/
after making changes
src/manifest.json
- Extension configuration and permissionssrc/background.js
- Service worker that monitors HTTP requestssrc/popup.html
- Extension popup interfacesrc/popup.js
- Popup functionality and JWT decodingsrc/icons/
- Extension icons
- Local processing only - All token analysis happens locally in your browser
- No data transmission - Tokens are never sent to external servers
- Temporary storage - Only keeps tokens in memory during browser session
- Minimal permissions - Only requests necessary permissions for functionality
Contributions are welcome! Please feel free to submit a Pull Request. For major changes, please open an issue first to discuss what you would like to change.
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature
) - Commit your changes (
git commit -m 'Add amazing feature'
) - Push to the branch (
git push origin feature/amazing-feature
) - Open a Pull Request
This project is licensed under the MIT License - see the LICENSE file for details.
- Some websites with strict CORS policies may not expose Authorization headers
- Extension requires active HTTP requests to capture tokens
- Only works with standard "Bearer " token format
If you encounter any issues or have feature requests, please open an issue on GitHub.
- This plugin was developed with AI assitance(Claude)