I have a backend application in go and I am using jwt authentication method for my api’s.
I have two questions:
- Which one the best algorithm for
secure an api HS256 or RS256
- I have created an api using the RS256 algorithm method. When I decode the token string in the Debugger then it decode all the values including the signature then how it is secure?
Also When I decode the token It given the invalid signature error although all the decoded values match with my original values.