Switch from Google tokeninfo
to local public-key verification
#105
Labels
Milestone
tokeninfo
to local public-key verification
#105
See https://developers.google.com/identity/sign-in/web/backend-auth for discussion
May be faster to verify using Ironclad on-host rather than relaying to Google, as well as potentially removing a MitM attack
The text was updated successfully, but these errors were encountered: