Cyber Security Interview Questions and Answers › Cyber Security
What is a JWT, and how can it go wrong?
A JWT (JSON Web Token) is a signed login token. Anyone can read it, but only the server can sign it. A weak JWT setup lets attackers become any user.
Read card text
What this card says
A JWT (JSON Web Token) is a signed login token. Anyone can read it, but only the server can sign it. A weak JWT setup lets attackers become any user.
Learn more in the lesson: 41.6 Application-Level Hijack: URL Tokens, CSRF, JWT