JWTShield — JWT, OIDC, and JWKS engineering

JWTShield — JWT, OIDC, and JWKS engineeringField notes on JWT validation, OIDC config drift, JWKS rotation, and catching auth regressions before they ship to prod.https://jwtshield.com/en-usThree JWT bugs that ship to prod silently — and the 5-line CI test that catches themhttps://jwtshield.com/blog/3-jwt-bugs-that-ship-to-prod-silently/https://jwtshield.com/blog/3-jwt-bugs-that-ship-to-prod-silently/Three concrete failure modes that take down OIDC in production: JWKS rotation without overlap, wrong audience claims, and issuer config drift. Reproduction code, the one HTTP call that catches each, and the 5-line GitHub Actions step that runs the whole regression suite.Sat, 02 May 2026 00:00:00 GMTCI regressionjwtjwksoidcci-cddevsecopsregressiongithub-actionsJWTShield teamThe alg=none JWT vulnerability, with code that exploits it and a 5-line fixhttps://jwtshield.com/blog/alg-none-jwt-vulnerability/https://jwtshield.com/blog/alg-none-jwt-vulnerability/Why the alg=none JWT bug class refuses to die, with working exploit code, the right way to refuse it, and the one HTTP call that catches every variant.Mon, 27 Apr 2026 00:00:00 GMTAttack classjwtjwsattackrfc7515JWTShield teamValidating Auth0 JWTs in production: the 8 checks Auth0's docs don't tell youhttps://jwtshield.com/blog/auth0-jwt-validation-production/https://jwtshield.com/blog/auth0-jwt-validation-production/Auth0's quickstart shows signature verification. Real production needs eight checks. Here is each one, why it exists, and the failure mode it prevents.Mon, 27 Apr 2026 00:00:00 GMTIdP integrationauth0oidcjwksjwtrs256JWTShield teamExpress JWT middleware in 2026: why express-jwt still has footguns and what to wire insteadhttps://jwtshield.com/blog/express-jwt-middleware-2026/https://jwtshield.com/blog/express-jwt-middleware-2026/express-jwt's defaults still let alg=none through on some configurations. Here is the safe handcrafted middleware in 60 lines, and the one-line replacement that off-loads verification to a service.Mon, 27 Apr 2026 00:00:00 GMTFrameworkexpressnodemiddlewarejwtJWTShield team