Remix.run Logo
xg15 7 days ago

Has anyone tried to send a JWT token with the fields in a different order (e.g. a long key first and key ID and algorithm behind) and see how many implementations will break?

karel-3d 7 days ago | parent [-]

there are better things to do, like send json that has "alg" twice, each different (one of them "none" ideally) and different implementations handle it differently