typescript

JWT Algorithm Confusion Attack

JWT.*algorithm.*confusion.*HS256.*RS256

Fixes

1.Always specify algorithms in verify: {algorithms:['RS256']}
2.Never accept HS256 when expecting RS256
3.Validate alg header matches expected algorithm before verify

jwtalgorithmconfusion

Related Errors

typescript3 fixes

TS2304: Cannot find name 'X'

TS2304.*Cannot find name

•Import the type/value
•Install @types/ package

typescript3 fixes

TS2305: Module has no exported member

TS2305.*has no exported member

•Check export name spelling
•Verify package version has that export

typescript3 fixes

TS2307: Cannot find module or its type declarations

TS2307.*Cannot find module

•Install the package or @types/ package
•Add module declaration in .d.ts file