Gandalf1783 – WindowsTechs.com

JWT – Able to change signature and its still verified?

Posted on October 21, 2023 by Gandalf1783

I just ran into something strange IMO.
I created a RSA Key using nodejs cryptoutils to use with my JWT auth server.
What I observer using jwt.io was the following:
The last letter of the signature can be changed, and the jwt is still consi… Continue reading JWT – Able to change signature and its still verified?→

How do you share private keys for signing e.g. JWTs inside Docker-Containers?

Posted on November 11, 2022 by Gandalf1783

I’ve written an application in NodeJS which essentially only performs a login:
You send your username/password, and you retrieve an JWT (JSON Web Token).
Those tokens are being signed by a private key. Using HMAC, these tokens can be verif… Continue reading How do you share private keys for signing e.g. JWTs inside Docker-Containers?→