browser-based dev tools. everything runs client-side.
encode or decode base64 strings with optional URL-safe mode
canonicalize JSON for AAD (Additional Authenticated Data) per RFC 8785