9 ms·
This is why audience fields exist in tokens
by nikau 3y ago
This is why audience fields exist in tokens
- hsbauauvhabzb 3y agoAs trivial as your statement sounds, thanks for finally explaining something which to me never made sense under most conditions :-)
- satya71 3y agoBut most auth implementations don’t bother checking it.
- quickthrower2 3y agoThis attack must rely on secrets being the same in prod and test. They should also solve that problem!