domains / families / security / testing-for-json-web-token-vulnerabilities

testing-for-json-web-token-vulnerabilities

separate

Tests JWT implementations for algorithm confusion, "none" algorithm bypass,

When to use

• When testing applications using JWT for authentication and session management
• During API security assessments where JWTs are used for authorization
• When evaluating OAuth 2.0 or OpenID Connect implementations using JWT
• During penetration testing of single sign-on (SSO) systems
• When auditing JWT library configurations for known vulnerabilities

Skill page

Source