Detects hardcoded JWT tokens within the codebase.

문서 > Datadog 보안 > Code Security > Static Code Analysis (SAST) > SAST 규칙 > Detects hardcoded JWT tokens within the codebase.

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Metadata

ID: javascript-node-security/detected-jwt-token

Language: JavaScript

Severity: Error

Category: Security

CWE: 798

Description

JSON Web Tokens (JWT) are commonly used for authentication and information exchange in web applications. While they are a powerful tool, they must be handled with care.

Non-Compliant Code Examples

"eyJ12345678901234-1234_1234.1234567890123-1234_1234.12345678-1234_1234"
"eyJ12345678901234-1234_1234.1234567890123-1234_1234"
'eyJ12345678901234-1234_1234.1234567890123-1234_1234.12345678-1234_1234'
'eyJ12345678901234-1234_1234.1234567890123-1234_1234'
`eyJ12345678901234-1234_1234.1234567890123-1234_1234.12345678-1234_1234`
`eyJ12345678901234-1234_1234.1234567890123-1234_1234`

Compliant Code Examples

"eyfoo"
`eybaz`
'eybla'
"eyJ12345678901234-1234_1234567890123"