Knock knock, who's there? Authenticating your single page apps using JSON Web Token

on YouTube ↗29m

" summary

Explains how JSON Web Tokens break into header/payload/signature, shows a live demo exchanging credentials for an access token and an ID token that populates a user avatar, compares opaque tokens versus JWTs, and demonstrates using the access token as a Bearer header. Recommends authorization code with PKCE instead of the implicit flow, warns do not store tokens in localStorage and avoid refresh tokens unless rotation or sender‑constraint exists, covers JWKS public-key verification and the practical pain of token invalidation.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 2:20Traditional Authentication
3. 7:00JSON Web Token
4. 11:54Access Token
5. 19:41Downsides
6. 21:26OAuth
7. 27:01Summary

" related talks

• 40mKnock knock, who’s there? Authenticating your single page apps using JSON Web TokensSam Bellen · FrontCon 2019
• 22mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · foss-north 2019
• 40mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · GrillJS 2019
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 34mAuthenticating your single page apps using JSON Web TokensSam Bellen · apidays Singapore 2019
• 25mHow JSON Web Tokens Work and Can be Used to Secure Your Single Page AppsSam Bellen · apidays Helsinki 2019
• 26mSecuring Single Page Applications with Token Based AuthenticationStefan Achtsnit · WeAreDevelopers Conference Vienna 2016
• 28mA Token Walks Into a SPA...Ado Kukic · ngVikings 2018