2015: setting JWT alg to 'none' bypasses verification 2020: • Aaron Parecki

48°F

yan https://twitter.com/bcrypt

2015: setting JWT alg to 'none' bypasses verification

2020: setting JWT alg to 'nonE' bypasses verification

lmaoooo https://insomniasec.com/blog/auth0-jwt-validation-bypass

Portland, Oregon • 65°F

Thu, Apr 16, 2020 7:34pm +00:00 (liked on Thu, Apr 16, 2020 12:40pm -07:00)

Have you written a response to this? Let me know the URL:

Posted in /likes using quill.p3k.io