JWT算法的重点是什么？

发布于 2025-01-23 23:01:16 字数 229 浏览 1 评论 0原文

JWT标头看起来像这样：

{
    "alg": "HS256",
    "typ": "JWT"
}

此标头将是基本64编码和加密的。因此，如果将JWT发送到服务器，服务器已经知道算法如何加密JWT。因此，拥有“ ALG”：“ HS256”的意义是什么？另外，“ typ”：“ JWT”实际上您也不需要这些信息。服务器知道他会得到JWT。那么所有这些标题都只是用于文档吗？

原文

The jwt header looks like this:

{
    "alg": "HS256",
    "typ": "JWT"
}

This header will be Base64 encoded and encrypted.
So if you send the JWT to the server, the server already knows the algorithm how the JWT is encrypted. So what is the point of having "alg": "HS256" . Also "typ":"JWT" actually you don't need that information as well. Server knows he will get a JWT. So is all this header just for documentation there ??

分享到QQ

分享到微博