CH-SEC-031La validación de JWT verifica issuer (iss) y audience (aud) entre distintos emisores, y verifica el tipo/propósito del token (typ/purpose) cuando el MISMO emisor firma tokens de distinto uso
Currently v3.25.0. To cite a stable, pinned form of this page, use /standard/versions/3.25.0/CH-SEC-031.
- Area
- SEC
- Severity
- high
- Detection
- llm
- Corpus coverage
- not measured by the corpus
Corpus coverage measured as of 9/2/2026 (commit 2c57d95600).