News for hackers. Stuff that matters.
Re:OWASP Top 10 2021 by Rels on Thursday September 09, 2021 @05:17PM (#28474768)
Yes.

Assuming you also validated the expiry date.

Assuming you also verified that the issuer matched the expected one, and that you didn't fetch keys based on the issuer that is in the token.

Also assuming that the crypto alg is the one you expected.

There are no comments on this comment yet.