Represents jwt.Token from github.com/golang-jwt/jwt v5. The Valid field and Parse function are critical — rules detect patterns where signature verification is skipped.
.ParseWithClaims().ParseWithClaims()SinkParseWithClaims(tokenString string, claims Claims, keyFunc Keyfunc, options ...ParserOption) (*Token, error)
Parses and validates JWT. keyFunc returning nil skips signature verification.
0.Valid()NeutralValid bool (field)
True if the token was validated. Accessing claims without checking Valid is a finding.
| FQN | Field | |
|---|---|---|
| github.com/golang-jwt/jwt/v5.Token | fqns[0] | |
| *.Token | patterns |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
require github.com/golang-jwt/jwt/v5 v5.2.0
from codepathfinder.go_rule import GoJWTToken