jwt

const (
	AlgNoneJwtScanID   = "jwt.alg_none"
	AlgNoneJwtScanName = "JWT None Algorithm"

	AlgNoneVulnerabilitySeverityLevel     = 9
	AlgNoneVulnerabilityOWASP2023Category = report.OWASP2023BrokenAuthCategory

	AlgNoneVulnerabilityID   = "broken_authentication.jwt_alg_none"
	AlgNoneVulnerabilityName = "JWT None Algorithm"
	AlgNoneVulnerabilityURL  = "https://vulnapi.cerberauth.com/docs/vulnerabilities/broken-authentication/jwt-alg-none/?utm_source=vulnapi"
)

const (
	BlankSecretVulnerabilityScanID   = "jwt.blank_secret"
	BlankSecretVulnerabilityScanName = "JWT Blank Secret"

	BlankSecretVulnerabilitySeverityLevel     = 9
	BlankSecretVulnerabilityOWASP2023Category = report.OWASP2023BrokenAuthCategory

	BlankSecretVulnerabilityID   = "broken_authentication.jwt_blank_secret"
	BlankSecretVulnerabilityName = "JWT Blank Secret"
	BlankSecretVulnerabilityURL  = "https://vulnapi.cerberauth.com/docs/vulnerabilities/broken-authentication/jwt-blank-secret/?utm_source=vulnapi"
)

const (
	NotVerifiedJwtScanID   = "jwt.not_verified"
	NotVerifiedJwtScanName = "JWT Not Verified"

	NotVerifiedVulnerabilitySeverityLevel     = 9
	NotVerifiedVulnerabilityOWASP2023Category = report.OWASP2023BrokenAuthCategory

	NotVerifiedVulnerabilityID   = "broken_authentication.jwt_not_verified"
	NotVerifiedVulnerabilityName = "JWT Not Verified"
	NotVerifiedVulnerabilityURL  = ""
)

const (
	NullSignatureScanID   = "jwt.null_signature"
	NullSignatureScanName = "JWT Null Signature"

	NullSigVulnerabilitySeverityLevel     = 9
	NullSigVulnerabilityOWASP2023Category = report.OWASP2023BrokenAuthCategory

	NullSigVulnerabilityID   = "broken_authentication.jwt_null_signature"
	NullSigVulnerabilityName = "JWT Null Signature"
	NullSigVulnerabilityURL  = ""
)

const (
	WeakSecretVulnerabilityScanID   = "jwt.weak_secret"
	WeakSecretVulnerabilityScanName = "JWT Weak Secret"

	WeakSecretVulnerabilitySeverityLevel     = 9
	WeakSecretVulnerabilityOWASP2023Category = report.OWASP2023BrokenAuthCategory

	WeakSecretVulnerabilityID   = "broken_authentication.jwt_weak_secret"
	WeakSecretVulnerabilityName = "JWT Weak Secret"
	WeakSecretVulnerabilityURL  = ""
)