A Token Walks Into a SPA

on YouTube ↗24m

" summary

Explains actual JWT structure with header, payload, signature and shows a hockey-ticket example that proves claims matter not buzzwords; decodes why tokens travel in the Authorization header and why storing JWTs in localStorage invites XSS while HTTP-only cookie and silent auth iframe let the authorization server reissue short-lived tokens. Recommends RS256, keep claims small, use Vue Router meta and navigation guards, and attach tokens via HTTP interceptors (axios/fetch wrappers) so authorization checks are enforced per request.

AI-written summary · about

" chapters (10)

1. 0:00A Token Walks into SPA Intro
2. 1:23Why Tokens?
3. 3:55Stateless
4. 5:34Header
5. 6:27Payload
6. 7:40Signature
7. 9:13Hockey example
8. 16:40Silent Auth
9. 19:05JWT Considerations
10. 21:34Resources

" related talks

• 43mA Token Walks Into a SPA...Ado Kukic · WebCamp Zagreb 2018
• 28mA Token Walks Into a SPA...Ado Kukic · ngVikings 2018
• 40mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · GrillJS 2019
• 19mJWT! What is it good for? Absolutely everything!Ben Dechrai · NDC Melbourne 2022
• 25mHow JSON Web Tokens Work and Can be Used to Secure Your Single Page AppsSam Bellen · apidays Helsinki 2019
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 04mJSON Web TokensMartin Gontovnikas · dotJS 2014
• 34mAuthenticating your single page apps using JSON Web TokensSam Bellen · apidays Singapore 2019