Remix.run Logo
▲ TZubiri a year ago

It feels like malpractice to use json in encryption

▲red_admiral a year ago | parent [-]

Sadly JWT and friends are "standard". In theory the representation and the data are independent and you can marshal and unmarshal correctly.

In practice, "alg:none" is a headache and everyone involved should be ashamed.