JWT- / API-Sicherheitscheckliste
Schwache Secrets, lange Ablaufzeiten, alg:none und fehlende iss/aud prüfen.
- Lokal in Ihrem Browser erzeugt
- Wir speichern Ihre Passwörter nicht
Eingabe
Secret
Checks
- Pass · Algorithm looks acceptable.
- Fail · The shared secret is too short or low-entropy for HMAC.
- Warning · Expiration is more than 7 days away.
- Pass · Issuer is present.
- Pass · Audience is present.
- Pass · Subject is present.