trufflesecurity/trufflehog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

0 Releases 361 Tags

RSS Feed
  • v3.91.1 aade3bff55
    Compare

    Add generic JWT detection and verification (#4441)

    kanshan released this 2025-11-20 15:39:12 +00:00

    This adds a generic detector and verifier for generic JWTs.

    This uses regular expressions for detection. Only public key cryptography algorithms are supported. Additionally, OIDC Discovery is attempted against the issuer to fetch the public key for signature verification.

    Bonus Cleanup:

    • Fix mixed indentation in alchemy test
    • Use strings.ReplaceAll(...) instead of strings.Replace(..., -1)
    • Use integer range loop instead of explicit counting loop
    • Revise and expand detectors.go comments

    Co-authored-by: Kashif Khan [email protected]

    Downloads