Answer the question
In order to leave comments, you need to log in
Why is data visible in jwt?
Here are two tokens with different secret keys.
4ikLwJ0CtAhG472rvY-eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhZG1pbiI6dHJ1ZX0.fXypkBFuqt1YgTjy6DWKdlZY
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhZG1pbiI6dHJ1ZX0.k0hte6WCqUFN7jTGfwkiXr6p0JaOAl03R1euLnzW69I
But if you go to the site, and check out these tokens, the data "payload" will be visible even if you enter the wrong secret key. What then is the profit of encryption, if everyone can see what lies there?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question