Skip to content

Disable signature verification #756

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mirai-toto opened this issue Oct 10, 2022 · 1 comment
Closed

Disable signature verification #756

mirai-toto opened this issue Oct 10, 2022 · 1 comment

Comments

@mirai-toto
Copy link

mirai-toto commented Oct 10, 2022

I only need to decode JWT token, this project is useful to get data from the payload.

In my micro service, I get a JWT Token, but I may not know the signature key used by the server.

The feature could look like below:
Jws<Claims> result = Jwts.parserBuilder().disableSigningKey().build().parseClaimsJws(authorizationToken);

I don't know if this feature break any security rule. I mean, I can already find all my payload data, I just wanted to use the JJWT project to make it easier.

@mirai-toto
Copy link
Author

mirai-toto commented Oct 10, 2022

I just saw the issue #205, I guess that won't happen.

But I see, that I can ignore the exception and decode anyway.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant