search

Zemke / starter-laravel-angular

Laravel and AngularJS Starter Application Boilerplate featuring Laravel 5.3 and AngularJS 1.5.8
https://starter-laravel-angular.herokuapp.com
Other
369 stars 119 forks source link

Critical vulnerabilities in JSON Web Token libraries #18

Closed nikeshbhagat closed 9 years ago

nikeshbhagat commented 9 years ago

Hi Zemke,

I think I mentioned this before, but really handy starter!

Anyway, I came across this article the other day and was wondering if your implementation addresses some of the concerns they mention.

Just a friendly inquiry as I'm not strong with all the intricacies of JWT quite yet.

Zemke commented 9 years ago

Hi @nikeshbhagat,

thanks for the notice.

Zemke/starter-laravel-angular uses tymondesigns/jwt-auth to do the JWT job. The author of tymondesigns/jwt-auth wrote this about the issue: https://github.com/tymondesigns/jwt-auth/issues/139#issuecomment-109804759.

So, it should be fixed.