Brennenstuhl on Security
Search

Topic 7 entries

Tokens & JWT

JSON Web Tokens and the JOSE family: what tokens are for, how they are signed, encrypted and verified, and where they go wrong.

JSON Web Tokens are everywhere and frequently misunderstood. Read the series in order: what JWTs are for, how they differ from OAuth, and the JOSE building blocks JWS, JWE, JWA and JWKS.

Follow this topic: RSS JSON Feed Markdown

Essays

  1. What is JWA? A Deep Dive into JSON Web Algorithms JSON Web Tokens
  2. Mastering JWKS: JSON Web Key Sets Explained JSON Web Tokens
  3. JSON Web Encryption: Exploring JWE Token JSON Web Tokens
  4. JWT vs OAuth 2.0: Understanding the Key Differences JSON Web Tokens
  5. The Purpose of JWT: Stateless Authentication JSON Web Tokens
  6. Single-Use JWT: Unlocking the Power of Stateless One Time Token JSON Web Tokens

Field guide

  1. What is inside a JWT? Field Guide