Is pass field suppose to be in JWT Token payload?

usefulteam / jwt-auth

WordPress JSON Web Token Authentication

https://wordpress.org/plugins/jwt-auth/

124 stars 50 forks source link

Closed devmadhava closed 2 months ago

devmadhava commented 2 months ago

I noticed there is a pass field in payload. Is it the hashed password?

pesseba commented 2 months ago

It is just a hash generated when user change the password, usefull to revoke all tokens. There is no relation with password itself...

devmadhava commented 2 months ago

Thank you so much for clarifying.