Snippet example is a dangerous implementation of JWT validation and should be modified to correctly validate the token and/or warn users to not use this exact logic

[Ciarands]

Existing documentation URL(s)

• https://developers.cloudflare.com/rules/snippets/examples/jwt-validation/

What changes are you suggesting?

The validateJWT function only checks the expiry of the token. The comment warning(s) are not sufficient for users who would be unaware of the potential danger of validating in this way. This should be clarified with a explicit warning that this is unsafe code, and/or offer a reference for a safe implementation of JWT validation.

Additional information

No response

[Ciarands]

Similar cautions exist on other examples, but seems to have been missed on this one:

• https://developers.cloudflare.com/rules/snippets/examples/auth-with-headers/