Dominique.Fournier/DomFramework
1
0
Fork 0
Code Issues Pull Requests Projects Releases Activity

jwt : add a warning on the content of the token, if confidential data must be stored in it

Browse Source 
git-svn-id: https://svn.fournier38.fr/svn/ProgSVN/trunk@5795 bf3deb0d-5f1a-0410-827f-c0cc1f45334c
This commit is contained in:
Dominique Fournier
2019-12-05 13:15:48 +00:00
parent 11d4f7686b
commit 2c767e7f06
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
jwt.php
View File

@@ -6,6 +6,9 @@
/** Allow to manage the JSON Web Tokens /** Allow to manage the JSON Web Tokens
* Based on https://tools.ietf.org/html/rfc7519 * Based on https://tools.ietf.org/html/rfc7519
*
* Do not put confidential data in payload without encrypt it, as the result
* is only a Base64 format of JSON...
*/ */
class jwt class jwt
{ {
@@ -20,7 +23,10 @@ class jwt
); );
// }}} // }}}
/** Create the token based on payload, key /** Create the token based on payload, sign it with key, and optionally
* encrypt it with ckey
* Do not put confidential data in payload without encrypt it, as the result
* is only a Base64 format of JSON...
* @param array $payload The payload to store * @param array $payload The payload to store
* @param string $key The key to be used to sign the token * @param string $key The key to be used to sign the token
* @param string|null $alg The algorithm to use to sign the token (default * @param string|null $alg The algorithm to use to sign the token (default