OWASPASVS 5.0 requirement
ASVS-V6.8.2 The presence and integrity of digital signatures on authentication assertions (for example on jwts or saml assertions) are always…
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.8 Authentication with an Identity Provider
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the presence and integrity of digital signatures on authentication assertions (for example on JWTs or SAML assertions) are always validated, rejecting any assertions that are unsigned or have invalid signatures.