4.x

[ahmetkocadogan]

hello @marcelcorso

Is it wise to create an endpoint for JWT validation, which we can post the incoming JWT signature and our access key, and get a true/false result, like if true "yes this request came from us" and no"this request does not come from us" ? If it is logical, this means JWT library dependency can be dropped.

[marcelcorso]

@ahmetkocadogan doing another request to validate the JWT may be too slow. The SDK follows this: https://developers.messagebird.com/api/#verifying-http-requests