3 ms·

I'm pretty sure he meant they were putting the private key in the jwt. People do some dumb stuff. And the dunning kruger effect is all too real.

• Salgat 4y ago
  He said it was used to verify the token, which is only true if you use a symmetric key not a private key.
  • ehutch79 4y ago
    Right, from what they're saying, they're pulling the key out of the claims to verify the token. No it doesn't make sense.