Class JwtSecurityAnalyzer
- Namespace
- Kuestenlogik.Bowire.Security
- Assembly
- Kuestenlogik.Bowire.dll
Deterministic JWT security analysis (#105): decodes a token's header + payload
and runs rule-based checks — alg=none, symmetric-HMAC crackability,
missing / expired / long-lived exp, missing nbf, scope creep,
audience binding, future iat, kid injection surface. No crypto,
no network, no AI — the substance a tester would otherwise eyeball on jwt.io.
An AI layer can narrate these; this is the ground truth it narrates.
public static class JwtSecurityAnalyzer- Inheritance
-
JwtSecurityAnalyzer
- Inherited Members
Methods
Analyze(string, string?, long?)
Analyze token. expectedAudience, when
given, is cross-checked against the aud claim. nowUnixSeconds
overrides "now" for deterministic time checks (defaults to the current time).
public static JwtAnalysis Analyze(string token, string? expectedAudience = null, long? nowUnixSeconds = null)