Encrypting JWT payload

后端 未结 3 1793
刺人心
刺人心 2020-12-31 01:07

JWTs have 3 parts:

  1. HEADER:ALGORITHM & TOKEN TYPE
  2. PAYLOAD:DATA
  3. SIGNATURE TO BE VERIFIED WITH THE SECRET KEY

Is it possible to

3条回答
  •  梦毁少年i
    2020-12-31 02:02

    Not encrypting the token means that other external services can read and validate that the token is in fact authentic without having access to your private key. (They would only need the public key)

提交回复
热议问题