mirror of
https://github.com/github/codeql.git
synced 2026-08-03 08:52:55 +02:00
16 lines
463 B
Ruby
16 lines
463 B
Ruby
require 'jwt'
|
|
|
|
payload = { foo: 'bar' }
|
|
|
|
# BAD: the token is not signed
|
|
token1 = JWT.encode({ foo: 'bar' }, "secret", 'none')
|
|
|
|
# BAD: the secret used is empty
|
|
token2 = JWT.encode({ foo: 'bar' }, nil, 'HS256') # $ Alert[rb/jwt-empty-secret-or-algorithm]
|
|
|
|
# BAD: the secret used is empty
|
|
token3 = JWT.encode({ foo: 'bar' }, "", 'HS256') # $ Alert[rb/jwt-empty-secret-or-algorithm]
|
|
|
|
# GOOD: the token is signed
|
|
token4 = JWT.encode({ foo: 'bar' }, "secret", 'HS256')
|