15 ms·

Security as in being able to login with any JWT you cared to create... just change the email address to anyone using the app and you’re them, no signature check

Security as in being able to login with any JWT you cared to create... just change the email address to anyone using the app and you’re them, no signature checked whatsoever :-/

jlengrand 6y ago
Are you referring to something specific that I'm not aware of? :)
- andy_ppp 6y ago
  All I’m saying is there are levels of bad... I suppose this is covered by your comment! But seriously :-)