JWT Gotchas
JWT Gotchas
JSON Web Tokens: You cannot just set any password value to Jwt__SigningKey, since HS256 signing needs at least 256 bits. To create a valid JWT key, open a Powershell window up and at the prompt enter the following command which will create a random 48-byte key encoded as base64:
[System.Convert]::ToBase64String([System.Security.Cryptography.RandomNumberGenerator]::GetBytes(48))
Comments
Post a Comment