3 ms·
So basically the server signs the token and afterwards the server can verify its own signature for every request with that token?
by sebazzz 2y ago
So basically the server signs the token and afterwards the server can verify its own signature for every request with that token?
- faeranne 2y agolooking at it from a high level, it doesn't appear the final token ever leaves the client till it's being redeemed. There's a middle step that does get signed, but this part is not what is sent.