Checklist de sécurité JWT / API
Vérifiez secrets faibles, longue expiration, alg:none et issuer/audience manquants.
- Généré localement dans votre navigateur
- Nous ne stockons pas vos mots de passe
Entrée
Secret
Checks
- Pass · Algorithm looks acceptable.
- Fail · The shared secret is too short or low-entropy for HMAC.
- Warning · Expiration is more than 7 days away.
- Pass · Issuer is present.
- Pass · Audience is present.
- Pass · Subject is present.