Json web token
3 likes3,194 views
JSON Web Tokens (JWT) are a secure method for representing claims between two parties, allowing for digital signing and encryption. They are primarily used for authentication and information exchange, enabling features like single sign-on and secure communication. JWTs consist of a header, payload, and signature, offering scalability and security against certain attacks.
Json web token
- 1. JSON Web Token (JWT)
- 2. MAYANK PATEL APPLICATION ARCHITECT - OILDEX, A SERVICE OF TRANSZAP /Linkedin @maxy_ermayank
- 3. What is JWT? JSON Web Tokens (JWT) are an open, industry standard RFC 7519 method for representing claims securely between two parties.
- 4. A string representing a set of claims as a JSON object that is encoded in a JWS or JWE, enabling the claims to be digitally signed or MACed and/or encrypted.
- 5. When should you use JSON Web Tokens?
- 6. Authentication This is the most common scenario for using JWT. Once the user is logged in, each subsequent request will include the JWT, allowing the user to access routes, services, and resources that are permitted with that token.
- 7. Authentication (Cont.) Single Sign On is a feature that widely uses JWT nowadays, because of its small overhead and its ability to be easily used across different domains.
- 8. Information Exchange JSON Web Tokens are a good way of securely transmitting information between parties, because as they can be signed, for example using public/private key pairs, you can be sure that the senders are who they say they are.
- 9. Information Exchange (Cont.) Additionally, as the signature is calculated using the header and the payload, you can also verify that the content hasn't been tampered with.
- 10. WHAT IS THE JSON WEB TOKEN STRUCTURE? JSON Web Tokens consist of three parts separated by dots (.), which are: Header Payload Signature
- 12. JWT Process
- 13. PROS AND CONS Standard Scalable Stateless Distributable Web, Desktop and Mobile ready A means to provide granular access control Secure against certain kinds of attacks, like CSRF, and many others. 64Bit encoding
- 14. JWT.IO JWT.IO allows you to decode, verify and generate JWT.
- 15. Using JSON Web Tokens as API Keys
- 16. Glossary
- 17. JSON Web Signature (JWS)
- 19. Message Authentication Code (MAC)
- 21. JWS Payload
- 22. JSON Web Encryption (JWE)
- 23. Thank You!!!