mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
23 lines
487 B
Python
23 lines
487 B
Python
from jose import jwt
|
|
|
|
# Encoding
|
|
|
|
# good - key and algorithm supplied
|
|
jwt.encode(token, "key", "HS256")
|
|
jwt.encode(token, key="key", algorithm="HS256")
|
|
|
|
# bad - empty key
|
|
jwt.encode(token, "", algorithm="HS256")
|
|
jwt.encode(token, key="", algorithm="HS256")
|
|
|
|
# Decoding
|
|
|
|
# good
|
|
jwt.decode(token, "key", "HS256")
|
|
|
|
# bad - unverified decoding
|
|
jwt.decode(token, key, options={"verify_signature": False})
|
|
|
|
# good - verified decoding
|
|
jwt.decode(token, key, options={"verify_signature": True})
|