Skip to content

More comprehensive JWT

Mikhail Mazurskiyrequested to merge
ash2k/better-jwt into master

Set token expiration, most importantly. See https://gitlab.com/gitlab-com/gl-security/appsec/appsec-reviews/-/issues/49#note_428021113

Follow up to verify the claims on the rails side: gitlab-org/gitlab#267958 (closed)

Edited by Hordur Freyr Yngvason

Merge request reports