Rojak – Web Dev Tools: Headers, Cookies & JWT

Inject request headers and cookies, watch request headers, and inspect JWT claims while developing web apps.

Rojak is a Malaysian salad that mixes everything on one plate. This is the same idea for web development: one extension for the tools you'd otherwise install separately. Set request headers and cookies for the environments you work on, and see what your pages actually send. Useful whenever you build, test or debug a web app: send an auth or API key header, turn on a feature flag, point requests at another backend version, try a session cookie, or check which token a page is really using. INJECT • Set, append or remove request headers, each rule with its own on/off switch, plus a master pause. • Append cookies to matching requests without touching the cookie jar, or write them to the jar when you need to. • Scope any rule with URL patterns such as *.example.com or https://api.example.com/v1/*, or set a global scope for all rules. • The toolbar badge shows how many rules are active; the icon turns grey while paused. INSPECT • Watch headers such as x-tenant-id and see their latest value for the current tab. • Decode JWTs from the Authorization header, or from headers and cookies you choose, and show the claims you care about with readable expiry. WORK FAST • Pick header and cookie names from a predefined list. • Paste "name: value", curl commands or JSON to create rules. • Export and import your setup as JSON to share it with your team. • Sensitive values are masked until you reveal them, so it's safe to screen-share. PRIVATE BY DESIGN Everything runs in your browser. No servers, no analytics, no tracking. Your rules stay on your device, and captured values are cleared when the tab closes.