BETA Shoulder is in beta — Findings may sometimes be wrong. Your feedback shapes what we fix next. Share feedback
Rules / Go

Echo Missing JWT Middleware

Description

API endpoints lack JWT authentication middleware protection.

How to fix

Add JWT middleware to protect API routes.

```go
import "github.com/labstack/echo-jwt/v4"

api := e.Group("/api")
api.Use(echojwt.JWT([]byte(os.Getenv("JWT_SECRET"))))
api.POST("/transfer", transferHandler)
```

Learn more: https://shoulder.dev/learn/go/cwe-306/jwt-middleware

Applies to

Languages

Frameworks

echo

Scan for this issue

Detect with Shoulder CLI
npx @shoulderdev/cli trust --rule=go-echo-missing-jwt .

Related rules