4 ms·
>Looks definitely easier than SAML. With the exception that it's only signed, not encrypted, yes. SAML does have the advantage in that regard, but I've never b
by TheCraiggers 12y ago
>Looks definitely easier than SAML.
With the exception that it's only signed, not encrypted, yes. SAML does have the advantage in that regard, but I've never been a fan of using clients to transport sensitive information anyway, even encrypted.
- necubi 12y agoJWTs can be encrypted instead of signed (see the JSON Web Encryption standard: http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption http://tools.ietf.org/html/draft-ietf-jose-json-web-encrypti...).