DEV Community

Discussion on: JSON Web Tokens (JWT)

Collapse
 
purdy profile image
Jason Purdy

Can you provide some more information here? Maybe an example of what a JWT looks like? And what a payload looks like. I'm puzzled by what you mean by sensitive data in the payload.

Thanks!

Collapse
 
jaypancholi94 profile image
Jay Pancholi
Collapse
 
nozibul_islam_113b1d5334f profile image
Nozibul Islam

thanks.

Collapse
 
nozibul_islam_113b1d5334f profile image
Nozibul Islam

Thanks for your comment! Apologies, but I’m unable to share more information at the moment. I’ll get back to you as soon as I can.

Collapse
 
mossy profile image
Aaron Moss

A payload can be any set of data that stores information about the user, for example: {
"sub": "1234567890",
"name": "John Doe",
"admin": true
}, a helpful note I found online about the JWT payload though is for signed tokens, you should never store and sensitive information in the payload OR header elements as they are readable by anyone.

I suppose by sensitive data, they meant user personal info?