Is it possible to just parse a JWT without verifying its signature?
your-diary opened this issue · comments
This is an intentional duplicate of #353.
(I don't understand at all why #353 was closed by its author as not planned without any discussion though the author is not owner, member or contributor.)
Contrary to its name, jwt.Parse() parses and validates the signature of a JWT:
func Parse(tokenString string, keyFunc Keyfunc, options ...ParserOption) (*Token, error)Is it possible to somehow just parse a JWT without taking care of its signature?
My current workaround is giving up using this package and manually split and base64-decode a JWT.
It was converted to a discussion because the OP found a similar issue, and there was a sufficient answer.
another discussion: #122
You're likely looking for this:
https://pkg.go.dev/github.com/golang-jwt/jwt/v5#Parser.ParseUnverified
Proceed with caution.