Nice article. If the JWT is being creating and sent from the front-end (Cognito) is there a way to determine if it's been tampered with? The signature is not sent in the JWT.
Self-Employed Software Developer, Trainer, Consultant. Keeping up to date. I’ve noticed in over 28 years of programming, one’s current skills have a shelf life.
