DEV Community

Discussion on: Signing and Validating JSON Web Tokens (JWT) For Everyone

Collapse
 
joshcanhelp profile image
Josh Cunningham

Generally, yes. You should be able to tell that library “hey, I only want to validate RS256 tokens” and the library should reject everything else.