Monday 27 March 2023, 16:02 #2
Web - Server - JWT - Unsecure Key Handling
Does that mean you’re hosting your own `jwks.json` somewhere? If so, note that the domain name is not necessarily the first thing after `http://` in a URL: https://en.wikipedia.org/wiki/URL
Wednesday 29 March 2023, 17:08 #3
Web - Server - JWT - Unsecure Key Handling
Thanks ebgfk4t7. I must say that your answer is quite inspiring. Now I got a bunch of stuff to go try out. The only thing that troubles me is that you seem surprised that I’m hosting my own jwks.json. Now I feel like I missed something and that I’m over-complicating things. Where you able to complete this challenge only using local files ?
Thursday 25 May 2023, 10:42 #5
Web - Server - JWT - Unsecure Key Handling
Ho my god, how could I have been so dumb ... Tunnel vision drags you into rabbit holes sometimes. Thanks ebgfk4t7