appleboy/gin-jwt

Security concerns with HS256

deshmukhrajvardhan opened this issue 4 years ago · 0 comments

deshmukhrajvardhan commented 4 years ago

Can we change the default Algorithm:

gin-jwt/auth_jwt.go

Line 29 in 6f3e50b

// Optional, default is HS256.

As it has known vulnerabilities and tools to hack: https://github.com/lmammino/jwt-cracker