Field notes from the walls.

JWT Security: 7 Common Mistakes That Let Attackers In

JWTs are easy to use and easy to misuse. Here are the seven mistakes — from the alg:none bypass to storing tokens in localStorage — that turn your auth into an open door.