You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
However, currently the settings is only for verification.
The content of the access-token is not encrypted and can be viewed in https://jwt.io
This is not good in production.
We would like to have a better setting of jwt-token
to encrypt the content in the token as well.
It's with high probability that it's doable by just changing the setting of the square library.
The text was updated successfully, but these errors were encountered:
Provide the github link(s) of the file#line (請提供 github 關於 code 的 link)
https://github.com/Ptt-official-app/go-pttbbs/blob/main/api/auth_utils.go#L53
What would you like to discuss (你想要討論什麼呢?~)
Currently we are using jwt implemented by square.
https://github.com/Ptt-official-app/go-pttbbs/blob/main/go.mod#L16
However, currently the settings is only for verification.
The content of the access-token is not encrypted and can be viewed in https://jwt.io
This is not good in production.
We would like to have a better setting of jwt-token
to encrypt the content in the token as well.
It's with high probability that it's doable by just changing the setting of the square library.
The text was updated successfully, but these errors were encountered: