Code reviewMediumcr-g575

Subject Jwt auth vulnerabilityLevel Mid–Senior~22 minCommon in Security interviewsIndustries Software development, Technology

Question

Review this Go API-gateway auth check.

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewgo

1func userFromToken(r *http.Request) (string, error) {2    raw := strings.TrimPrefix(r.Header.Get("Authorization"), "Bearer ")3    parser := jwt.NewParser()4    claims := jwt.MapClaims{}5    _, _, err := parser.ParseUnverified(raw, claims)6    if err != nil {7        return "", err8    }9    return claims["sub"].(string), nil10}

Run or narrate your approach, then ask the coach.