HS256 signature validation seems not working properly

jsonwebtoken / jsonwebtoken.github.io

Developer-centric site to create awareness of JWTs and troubleshoot them.

jwt.io

Other

496 stars 324 forks source link

HS256 signature validation seems not working properly #572

Open longtimeago opened 2 years ago

longtimeago commented 2 years ago

After I enter proper secret once and signature is confirmed to be valid I can remove the secret or change it and the signature still shown as valid. Even if the secret is empty. Moreover signature is changing every time I change the text in "secret" textbox

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you have not received a response for our team (apologies for the delay) and this is still a blocker, please reply with additional information or just a ping. Thank you for your contribution! 🙇‍♂️

DanOnCall commented 4 months ago

Hello, Paul. I am one of the newly appointed maintainers for jwt.io and I am working on a new version of the site. I apologize for the lack of response. I also detected these UX bugs and they are getting fixed in the new version 🙏 Thank you for having used jwt.io and sharing your feedback.

longtimeago commented 4 months ago

@DanOnCall hi Dan, awesome news, thanks a lot! :handshake: