JWT - To authentication & beyond!
summary
Explains how Json Web Tokens encode header and claims with base64url not base64, show registered claims count as seven and use iss aud sub iat exp nbf for concrete checks, recommends RSA or ECDSA over HMAC for APIs and notes RSA gives bigger signatures but easier adoption, demonstrates a PHP library targeting PHP 7, gives example lifetimes (issued now valid after 30s expire in 1h), covers revocation via blacklist/whitelist and mentions using JWE to encrypt payloads.
AI-written summary · about
chapters (7)
- 0:00Start
- 7:46The JSON!
- 9:57Sessions
- 14:49Want more?
- 22:43Can you trust it?
- 30:44Is JWT a replacement?
- 33:06How to block tokens?
