JWE Guidance

[susansiow]

One of the reasons of sticking to Quasar Framework is the efforts of the team paying great attention to security, thank you!

In regard to the usage of JWE - https://quasar.dev/security/dos-and-donts#web, I wonder if you have a code sample on the application of JWE and with Quasar boot file?

[s.molinari]

@susansiow - From the client app’s perspective, there is no difference to using normal JWTs. The difference is how the data in the JWT is encrypted and that happens all on the server side. That point should read…

Do use the JWE form of JWTs, instead of the JWS form.

More info here: https://medium.facilelogin.com/jwt-jws-and-jwe-for-not-so-dummies-b63310d201a3

Scott

[susansiow]

@s-molinari Thanks Scott!