4 ms·
- Make sure your JWT framework has a way to revoke tokens issued to a user before a certain date and/or when a user changes their password, in case their token
by Alex3917 11y ago
- Make sure your JWT framework has a way to revoke tokens issued to a user before a certain date and/or when a user changes their password, in case their token or password gets leaked.
- Make sure there are no XSS vulnerabilities. JWT works best with JSON APIs, because that way (in addition to sanitizing inputs) you can also add CSP headers to prevent modern browsers from executing any JS returned from the page.