News for hackers. Stuff that matters.

A comment on Hardcoded secrets, unverified tokens, and other common JWT mistakes. Parent comment

Re:Hardcoded secrets, unverified tokens, and other common JW... by other_herbert on Saturday June 27, 2020 @10:58AM (#23662215)
Jwt works in this case... You issue a key to a known user.. In this case you create an API user (doesn't have to exist in a backing store) and set the expiration to a super short duration and validate it on the other end... You can also use this for API testing in unit/integration tests
[ Parent | on HN ]

There are no comments on this comment yet.