{"slug":"jwt-verification-review-95996ee5","name":"JWT Verification Review","summary":"JWT Verification Review — Reviews ONE piece of code that verifies JSON Web Tokens for the five mistakes that let a forged or stale token in, and lists only those, one line each with a fixed code, the function, why it hurts and the fix - or exactly No findings. It catches an algorithm taken from the token header or no fixed algorithm list, an expiry check switched off, neither audience nor issuer checked, a payload read with decode where verify is needed, and a signing secret written into the so…","status":"live","indexable":true,"listed_since":"2026-10-27T11:36:21.930074Z","sources":[{"source":"x402_bazaar","external_id":"https://api.aiskills402.com/v1/skills/jwt-verification-review/file","owner_address":"0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68","seen_at":"2026-11-09T20:54:00.986179Z","removed_at":null}],"endpoints":[{"url":"https://api.aiskills402.com/v1/skills/jwt-verification-review/file","host":"api.aiskills402.com","protocol":"x402","state":"live","last_probe_at":"2026-11-09T04:57:10.750450Z","last_ok_at":"2026-11-09T04:57:10.750450Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"api-aiskills402-com-62d86cc3","name":"api.aiskills402.com"}],"payment_options":[{"endpoint_url":"https://api.aiskills402.com/v1/skills/jwt-verification-review/file","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"10000","pay_to":"0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68","observed_at":"2026-11-09T04:57:10.750450Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":2,"last_paid_at":"2026-11-03T03:05:12.292Z","reported_at":"2026-11-09T20:54:00.986179Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check 23 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 12 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"1 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-09T00:25:12.374102Z"},"identity":{"endpoint_domains":["aiskills402.com"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}