News for hackers. Stuff that matters.

A comment on Ask HN: JWT as a Currency?.

Re:Ask HN: JWT as a Currency? by sovrin on Tuesday August 02, 2016 @07:57AM (#12209245)
Are you going to encrypt these? Plain tokens are easy to decode and manipulate.

https://jwt.io/

[ Parent | on HN ]
Re:Ask HN: JWT as a Currency? by ncodes on Tuesday August 02, 2016 @08:08AM (#12209289)
I do not think there is need to encrypt the data as the JWT signature ensures the content cannot be altered successfully.

You will need the private key to successfully alter the token.

Also, the tokens shouldn't contain private information since JWT tokens can easily be decoded.

[ Parent | on HN ]