DEV Community

Discussion on: Real-time Chat Application Using Strapi, Next, Socket.io, and PostgreSQL

Collapse
 
thi3rry profile image
Thierry Poinot

You should not verify your token on frontend as you publicly expose your secret key and anyone who find it could create signed tokens that were not created by your server.
Verifying is done by strapi, and you should catch 401 if the token is not verified by the backend part.

Read more here :