JWT - To authentication & beyond!
summary
Shows a concrete JWT workflow: a PHP library builds, signs and parses compact tokens, validates claims and signatures, and includes a debugger at jwt.io. Claims like expiration (exp) issued at (iat) not before (nbf) and identifiers (jti, aud, sub) live inside the token so servers can be stateless but must handle revocation via a blacklist or whitelist. Integrity uses RSA or ECDSA signatures not encryption so sensitive data requires JWE or server storage. Library targets PHP 7.1+ and demonstrates validators, parsers and signer setup.
AI-written summary · about
chapters (18)
- 0:00Intro
- 2:00Luis Cobucci
- 5:00Authorization
- 7:07CSRs
- 16:55PHP
- 22:15JWT debugger
- 23:53JWT vs OAuth
- 24:50Best algorithm to create signatures
- 26:50How to block tokens
- 28:13How much data can I use
- 28:49How to secure the token
- 30:26Questions
- 33:16Limitations
- 35:28User IDs
- 40:15Token Expiration
- 41:24Token Expiration Example
- 43:07bearer tokens
- 43:35libraries
