sast-jwt

【数据与研究】Detect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase approach: first map all JWT issuance and verification sites to understand the token lifecycle and signing configuration, then check each verification site for exploitable weaknesses such as algorithm confusion, missing signature verification, weak secrets, header inj…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准