Ravi Sir's Cards › AWS
What must you verify on a JWT?
This interview card answers: What must you verify on a JWT? Signature (JWKS), issuer, audience, expiry (and token_use as applicable). Never trust claims without verification. API Gateway Cognito authorizer handles checks.
Read card text
What this card says
What it is
Signature (JWKS), issuer, audience, expiry (and token_use as applicable).
JWT
Why it matters
Never trust claims without verification.
How / example
API Gateway Cognito authorizer handles checks.