Comment on API Security Checklist for developersparentComments−fanf29yjwt-go says right in the readme that it is not encrypted:> It's important to know that JWT does not provide encryption, which means anyone who has access to the token can read its contents. <<−sAbakumoff9yOkay, let's say that 3rd party read the user id which my app keeps in a JWT token. What would they do with it?
Comments
jwt-go says right in the readme that it is not encrypted:
Okay, let's say that 3rd party read the user id which my app keeps in a JWT token. What would they do with it?