Jwt Jwt Exposed Data

The object is passed strictly to jose.JWT.sign(...). Make sure that sensitive information is not exposed through JWT token payload.

IndexedPublic repositoryMediumMedium confidenceVerifiedLGPL-3.0-onlyJS
greprules fetch gitlab-sast-rules-lgpl-javascript-jwt-rule-jwt-exposed-data --engine opengrep

Description

The object is passed strictly to jose.JWT.sign(...). Make sure that sensitive information is not exposed through JWT token payload.