Files
codeql/go/ql/test/query-tests/Security/CWE-798/HardcodedKeysBad.go
2026-06-11 07:15:54 +02:00

21 lines
359 B
Go

package main
import (
"time"
jwt "github.com/golang-jwt/jwt/v4"
)
func bad() (interface{}, error) {
mySigningKey := []byte("AllYourBase")
claims := &jwt.RegisteredClaims{
ExpiresAt: jwt.NewNumericDate(time.Unix(1516239022, 0)),
Issuer: "test",
}
token := jwt.NewWithClaims(nil, claims)
return token.SignedString(mySigningKey) // $ Alert
}