You&#x27;d think so, but no.<p>I actually uncovered a bug in a JWT library once when I wrote a test for my application to verify that an invalid token would be rejected.<p>Let&#x27;s just say there was no corresponding test in the libraries test suite.