Steps to Take if JWT Token is Compromised
What should I do if my JWT token is compromised?
If your JWT token is compromised, you should reset your shared secret and revoke all existing tokens.
Resetting the shared secret will invalidate the access of anyone who had previously authenticated, preventing them from viewing restricted content until a new valid token is issued. This ensures that your restricted content remains secure and only accessible to authorized users.
More related questions
How can I configure Web Widget (Classic) to show restricted help center content?
To show restricted help center content in Web Widget (Classic), you need to configure your widget settings and add code snippets to your website. First, ensure your help center security settings are correct by enabling or disabling the 'Require…
What are the security settings for displaying restricted content in Web Widget (Classic)?
The security settings for displaying restricted content in Web Widget (Classic) depend on your help center type. For a public help center, do not enable 'Require sign in'. For a restricted help center, enable 'Require sign in'. If your help center…
Do I need single sign-on (SSO) for Web Widget (Classic) restricted content?
You don't need single sign-on (SSO) to use restricted content in Web Widget (Classic), but it can enhance the user experience. SSO provides a seamless experience for users who want to view original articles from the Web Widget. However, even…
How do I generate a JWT token for Web Widget (Classic)?
Generating a JWT token for Web Widget (Classic) involves creating a server-side payload with specific information. The payload should include the customer's name, email, current timestamp (iat), and a unique identifier (jti). Specify HS256 as the…
Can I test Web Widget (Classic) restricted content on localhost?
Yes, you can test Web Widget (Classic) restricted content on localhost by adding it to the allowlist. Specify 'localhost' or '127.0.0.1' as a valid domain in the allowlist to test in your development environment. This setup should allow you to view…
Interested indeflectingover 70% of your Zendesk support tickets?
Zendesk Support Tickets
Zendesk Messaging (live chat)
Join1,000+ companies reducing their support costs and freeing up support agents for more important work
“We needed an AI agent integrated within our current tools. My AskAI was the only solution that wasn't going to disrupt our operations.”
Zeffy
“At the end of last year I was given the challenge - how can we provide the same or better service, without hiring anyone?”
Zinc
“My AskAI blew everybody else out of the water. It made the selection process very easy for us.”
Customer.io($50M+ ARR)
“It now resolves 71% of queries (over 35,000 every month), meaning more time solving complex issues and improving UX.”
Freecash
“We needed an AI agent integrated within our current tools. My AskAI was the only solution that wasn't going to disrupt our operations.”
Zeffy
“At the end of last year I was given the challenge - how can we provide the same or better service, without hiring anyone?”
Zinc
“My AskAI blew everybody else out of the water. It made the selection process very easy for us.”
Customer.io($50M+ ARR)
“It now resolves 71% of queries (over 35,000 every month), meaning more time solving complex issues and improving UX.”
Freecash
Reduce support costs.Spend more time on customer success.
