News for hackers. Stuff that matters.

A comment on Ask HN: What do you use for authentication and authorization?. Parent comment

Re:Ask HN: What do you use for authentication and authorizat... by nmgsd on Saturday December 29, 2018 @12:22PM (#18784596)
You can't forge a JWT without stealing the private key of the valid JWT signer.

You can steal a JWT token the same way you can steal a session token.

[ Parent | on HN ]

There are no comments on this comment yet.