LINKED LIST [txt mode] ▸ Hardcoded secrets, unverified tokens,...

home explore | log in

Hardcoded secrets, unverified tokens, and other common JWT mistakes

r2c.dev · first added by @afreshcup · 2026-09-30 · 1 upvotes

log in to save, upvote or flag this.

─── In 0 lists ─────────────────────────────────────────

(not in any lists yet)

─── Discussions ────────────────────────────────────────

* Hardcoded secrets, unverified tokens, and other common JWT mistakes

188 pts · 82 comments · node

─── From the discussion ────────────────────────────────

* Parse, don’t validate

lexi-lambda.github.io · node

* RFC 8725: JSON Web Token Best Current Practices | RFC Editor

tools.ietf.org · node

* PASETO

paseto.io · node

* DEF CON 26 CRYPTO AND PRIVACY VILLAGE - Scott Arciszewski - No Way JOSE! Designing Cryptography

youtu.be · node

* spiffe/standards/JWT-SVID.md at main · spiffe/spiffe

github.com · node