Description
Right now, we can see if jwt auth failed we can get a error msg {"message":"Missing JWT token in request"}
This tells us we use jwt auth. might be hacker can use the information to do something.
if we can customize the msg will be better to auth security. like consumer restriction plugin, i can use rejected_msg option to change the default msg.
thanks
Description
Right now, we can see if jwt auth failed we can get a error msg {"message":"Missing JWT token in request"}
This tells us we use jwt auth. might be hacker can use the information to do something.
if we can customize the msg will be better to auth security. like consumer restriction plugin, i can use rejected_msg option to change the default msg.
thanks