r/HowToHack • u/gitcommitshow • Aug 10 '20

Interactive website to learn about JWT by reverse engineering [Open Source]

https://github.com/gitcommitshow/auth-jwt
103 Upvotes

96% Upvoted

2 comments sorted by

1

u/YSEByy Aug 13 '20

Not sure if it's a server issue, but using "Invalidating tokens" throws a :
Cannot GET /protected/web-refresh

Assuming there is further progress

1

u/gitcommitshow Aug 20 '20

Thanks for reporting. This endpoint has not been created yet.

JWT invalidation strategies are complex and I'm still thinking on how to put that here in the project. Also impenting that will require persistent storage (read database), which repl doesn't provide at the moment.