This commit is contained in:
@@ -29,8 +29,8 @@ SERVER
|
||||
- Add tests to ensure security of JWT
|
||||
- https://assets.pentesterlab.com/jwt_security_cheatsheet/jwt_security_cheatsheet.pdf
|
||||
- https://gist.github.com/ejcx/cbf2e1bb75b02c7d77bc1cfcf84a167e
|
||||
- Test for expired token
|
||||
- Wrong key / credentials rejected (ISS?)
|
||||
- DONE Test for expired token
|
||||
- . Wrong key / credentials rejected (ISS?)
|
||||
- Test truncated signature portion (3rd part)
|
||||
- Test signature transpose bytes
|
||||
- Test with no or wrong algorithm ensure won't accept
|
||||
|
||||
Reference in New Issue
Block a user