JSON Web Tokens
summary
Shows how JWTs are a compact, URL-safe, signed token format (three base64url segments: header, payload, signature) and demonstrates building one with Python stdlib using a shared secret example abc123 and HMAC SHA-256 to compute the signature. Covers using PyJWT for encode/decode, a homemade Django auth package (v0.1, described as alpha) and the more mature djangorestframework-jwt (released with Django 1.7 support). Claims: stateless auth, no session store, no CSRF, works across domains, for mobile and WebSockets.
AI-written summary · about
chapters (10)
- 0:00Introduction to JWT
- 1:24Use cases for tokens
- 3:33Benefits of token auth
- 5:23What is JWT standard
- 8:00Creating a token
- 12:03Signing and security
- 14:10Python library example
- 15:51Django integration
- 17:57Django REST framework
- 20:08Conclusion and Q&A
