Great question! A few items to consider...

• There is no backend here - it's only static HTML/JavaScript/CSS
• Only talks to Middleware services - watch the network traffic if you want to be sure
• Source code is available - the repo is linked in the top-nav bar

If you're still worried, this app is a Docker container, so you can run it yourself too!

1. Run the following command:
   docker container run -dp 443:443 code.vt.edu:5005/devcom/ed-jwt-generator
2. And then open your browser to https://localhost/ (yes... it uses a self-signed cert)

If you want to be extra nerdy, you can add this alias and then simply run get-jwt:

alias get-jwt='docker container run -dtip 443:443 --name jwt_gen code.vt.edu:5005/devcom/ed-jwt-generator; open https://localhost; docker container attach jwt_gen; docker container rm -f jwt_gen'