mcp-server-semgrep/semgrep-rules/javascript/jsonwebtoken/security/example2.js

MCP Server for Semgrep Integration - static code analysis with AI

(()=> {

  'use strict';
  let User = require('./user'),
  jwt      = require('jsonwebtoken');

  const express = require('express');
  let router = express.Router();

  router.post('/signup', (req, res) => {
    let user = new User({
      name:req.body.name,
      password:req.body.password
    });
    // ruleid: hardcoded-jwt-secret
    var token = jwt.sign(user, "hardcoded-secret", {expiresIn: 60*60*10});
    res.send({success:true, token: token});
  });

  module.exports = router;
})();