Burp Suite User Forum

Create new post

How to handle JWT sessions in burp.

Dhaval | Last updated: Mar 22, 2018 09:06AM UTC

What about applications which is having JWT as authentication, Session expires quickly in that, How to handle that ?

Liam, PortSwigger Agent | Last updated: Mar 22, 2018 09:09AM UTC

Can you identify the response where the servers sets the JWT? There will probably be a POST to /login or similar, and the response will contain the JWT, probably within a JSON object. You may need to code a simple extension that will repeat the login as required: - https://portswigger.net/burp/extender

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.