S
S
sugadu2016-09-04 13:04:50
JavaScript
sugadu, 2016-09-04 13:04:50

Why is data visible in jwt?

Here are two tokens with different secret keys.
4ikLwJ0CtAhG472rvY-eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhZG1pbiI6dHJ1ZX0.fXypkBFuqt1YgTjy6DWKdlZY
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhZG1pbiI6dHJ1ZX0.k0hte6WCqUFN7jTGfwkiXr6p0JaOAl03R1euLnzW69I
But if you go to the site, and check out these tokens, the data "payload" will be visible even if you enter the wrong secret key. What then is the profit of encryption, if everyone can see what lies there?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question