4 ms·
well, you're in luck, they are JWTs in fact. JWTs in JWTs, so extra secure.
by milkshakes 1y ago
well, you're in luck, they are JWTs in fact. JWTs in JWTs, so extra secure.
- Freak_NL 1y agoAnd of course, because the inner JWT is already signed, why bother signing the outer one? Just validate the inner one! I'm feeling sorry for those poor abused JWTs in this vulnerability.