~/talk

JWT, WTF?

on YouTube 41m
Talkat Codemotion Amsterdam 2017 · 2017-05-16..05-17· [security, web-platform]

speaker

name:Phil Nash
website:https://philna.sh

resources

video:https://youtu.be/rYpapIOQ7f0
slides:none on file

summary

Explains JSON Web Token format: header.payload.signature with base64url encoding and a signature generated using HS256 HMAC. Shows how to build and verify a token in Node (crypto HMAC, secure compare), demos the jwt.io debugger, and details real uses: stateless sessions (can't revoke without state so use revocation via jti blacklist), microservices with RS256 public/private keys, and Twilio Chat grants as a concrete working example.

AI-written summary · about

chapters (11)

  1. 0:00Introduction and speaker intro
  2. 3:44What is a JWT
  3. 8:00Use cases for JWTs
  4. 11:11Creating a JWT
  5. 17:34Verifying a JWT
  6. 20:33Pitfalls of JWTs
  7. 23:05Stateless sessions with JWTs
  8. 25:10JWTs in microservices
  9. 26:40Client-side JWTs
  10. 29:30Resources and summary
  11. 30:14Q&A session

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.