JSON Web Tokens

on YouTube ↗04m

" summary

Shows how JSON Web Tokens replace cookie sessions by putting header payload and signature into a compact string and signing it with a server secret so the server can verify origin and read claims. Describes the three parts and uses HMAC256 for signing, stores the token in localStorage and sends it on Authorization requests, and makes authentication stateless. Demonstrates editing the payload to show the token value changing live. Filmed at dotJS 2014 Paris.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 1:26Json Web Token
3. 2:13Header
4. 2:45Signature

" related talks

• 32mPortable Sessions with JSON Web TokensLance Ivy · RailsConf 2017
• 41mJWT, WTF?Phil Nash · Codemotion Amsterdam 2017
• 24mA Token Walks Into a SPAIgnacio Anaya · VueConf TO 2018
• 28mJWT, WTF?Phil Nash · JSPoland Conf 2017
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 34mWhat makes JSON Web Tokens (JWT) secure?Siddharth Kshetrapal · JSFoo 2018
• 54mJSON Web Tokens SuckRandall Degges · CodeMash 2018
• 25mHow JSON Web Tokens Work and Can be Used to Secure Your Single Page AppsSam Bellen · apidays Helsinki 2019