JWT - To authentication & beyond!
summary
Explains a concrete migration from DB-backed session tokens to JWTs that removed all token DB writes and cuts per-request I/O, reporting token validation under ~20ms. Recommends RSA for verification, warns about token size and cookie/query limits, and shows a PSR‑7 middleware + parser + validator design with strict typing and two validation modes (assert throws detail, validate returns boolean). Demonstrates whitelist/blacklist via Redis TTLs and a library that builds immutable, signed tokens and parses them reliably.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:46What Are Tokens
- 6:04Json Web Token
- 6:25Base64
- 9:11Authentication
- 14:23Csrf Tokens
- 16:31Public Claims
- 22:08Registered Claims
- 32:40Validation
- 33:41Validate a Token
