News for hackers. Stuff that matters.

A comment on Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting Is Harmful. Parent comment

Re:Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting Is Har... by wongarsu on Thursday April 16, 2020 @03:54PM (#22892841)
If you don't set it it's set to a reasonable list of algorithms [0], which doesn't include "none"

https://github.com/auth0/node-jsonwebtoken/blob/master/verif...

[ Parent | on HN ]

There are no comments on this comment yet.