JSON Web Tokens (JWT)

•

3 gostaram•3,715 visualizações

Presented at VarnaConf, July 2013

JSON Web Token (JWT)
For self-contained access and other tokens
OAuth 2.0 | OpenID Connect | …
Verifiable with signature, encryptable
Base64URL encoded

${"iss" "sub" "aud" "exp" "nbf" "iat" "jti" : : : : : : : "https://myserver.net", "alice@wonderland.net", [ "https://myapi.com", ... ], 1364293137871, 1364292537871, 1364292537871, "165a7bab-de06-4695-a2dd-9d8d6b40e443"} ---> eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhHQ00ifQ.K52jFwA QJHDxMhtaq7sg5tMuot_mT5dm1DR_01wj6ZUQQhJFO02vPI44W5nDj C5C_v4pW1UiJa3cwb5y2Rd9kSvb0ZxAqGX9c4Z4zouRU57729ML3V0 5UArUhck9ZvssfkDW1VclingL8LfagRUs2z95UkwhiZyaKpmrgqpKX 8azQFGNLBvEjXnxxoDFZIYwHOno290HOpig3aUsDxhsioweiXbeLXx LeRsivaLwUWRUZfHRC_HGAo8KSF4gQZmeJtRgai5mz6qgbVkg7jPQy ZFtM5_ul0UKHE2y0AtWm8IzDE_rbAV14OCRZJ6n38X5urVFFE5sdph dGsNlA.gjI_RIFWZXJwaO9R.oaE5a0N1MW9FBkhKeKeFa5e7hxVXOu ANZsNmBYYT8G_xlXkMD0nz4fIaGtuWd3t9XpkufvvfDxOnAs2SBX_Y 1kYGPto4mibBjIrXQEjDsKyKwndxzrutN9csmFwqWhx1sLHMpJkgsn fLTi9yWBPKH5Krx23IhoDGoSfqOquuhxn0y0Wk$

GET /protected-resource.html HTTP/1.1
Host: myapi.com
Authorization Bearer eyJhbGciOiJSU0EtT0FFUC...

Resources
●

Java Script Object Signing and Encryption
(JOSE) IETF WG:
–
–

JSON Web Signature (JWS)

–

JSON Web Encryption (JWE)

–
●

JSON Web Algorithms (JWA)

JSON Web Keys (JWK)

Nimbus JOSE+JWT library @Bitbucket:
https://bitbucket.org/nimbusds/nimbus-jose-jwt/

Mais conteúdo relacionado

Mais procurados

Back to Basics Webinar 3 - Thinking in DocumentsJoe Drumgoole

JSON Web Tokens Will Improve Your LifeJohn Anderson

Building Secure User Interfaces With JWTs (JSON Web Tokens)Stormpath

CIS14: I Left My JWT in San JOSECloudIDSummit

Blockchain Technologies for Data ScienceBruno Gonçalves

Node.js 與 google cloud storageonlinemad

Distributed Identities with OpenIDBastian Hofmann

Building a Social Network with MongoDBFred Chu

Deciphering Explain Output MongoDB

Secure Payments Over Mixed Communication MediaJonathan LeBlanc

Progressive downloads and rendering (Stoyan Stefanov)Ontico

Building Your First App with MongoDBMongoDB

Advanced Jsonguestfd7d7c

MongoDB + Java - Everything you need to know Norberto Leite

SF ElasticSearch Meetup - How HipChat Scaled to 1B MessagesAtlassian

Building Web Services for Mobile AppsSepialabs

MongoDB全機能解説1Takahiro Inoue

Token Based Authentication SystemsHüseyin BABAL

Who is Afraid of Cookies?Asaf Gery

Session 5 - NGSI-LD Advanced Operations | Train the Trainers ProgramFIWARE

Mais procurados (20)

Back to Basics Webinar 3 - Thinking in Documents

JSON Web Tokens Will Improve Your Life

Building Secure User Interfaces With JWTs (JSON Web Tokens)

CIS14: I Left My JWT in San JOSE

Blockchain Technologies for Data Science

Node.js 與 google cloud storage

Distributed Identities with OpenID

Building a Social Network with MongoDB

Deciphering Explain Output

Secure Payments Over Mixed Communication Media

Progressive downloads and rendering (Stoyan Stefanov)

Building Your First App with MongoDB

Advanced Json

MongoDB + Java - Everything you need to know

SF ElasticSearch Meetup - How HipChat Scaled to 1B Messages

Building Web Services for Mobile Apps

MongoDB全機能解説1

Token Based Authentication Systems

Who is Afraid of Cookies?

Session 5 - NGSI-LD Advanced Operations | Train the Trainers Program

Destaque

Json web token api authorizationGiulio De Donato

Stateless authentication with OAuth 2 and JWT - JavaZone 2015Alvaro Sanchez-Mariscal

Modern API Security with JSON Web TokensJonathan LeBlanc

Token Based Authentication Systems with AngularJS & NodeJSHüseyin BABAL

JSON Web TokenDeddy Setyadi

Stateless authentication for microservices - GR8Conf 2015Alvaro Sanchez-Mariscal

OpenID ConnectとSCIMによるエンタープライズでのID連携活用に向けてTakashi Yahata

第4回web技術勉強会暗号技術編その2tzm_freedom

ConFoo 2015 - Securing RESTful resources with OAuth2Rodrigo Cândido da Silva

GradleReturn on Intelligence

Gradle by ExampleEric Wendelin

Gradle IntroductionDmitry Buzdin

An Introduction to Gradle for Java DevelopersKostas Saidis

JWT The future-100--trends-and-change-to-watch-in-2016Brian Crotty

Jwt PresentationHolostik India Ltd.

Stateless authentication for microservicesAlvaro Sanchez-Mariscal

JSON Web TokensIvan Rosolen

Saml vs Oauth : Which one should I use?Anil Saldanha

Destaque (18)

Json web token api authorization

Stateless authentication with OAuth 2 and JWT - JavaZone 2015

Modern API Security with JSON Web Tokens

Token Based Authentication Systems with AngularJS & NodeJS

JSON Web Token

Stateless authentication for microservices - GR8Conf 2015

OpenID ConnectとSCIMによるエンタープライズでのID連携活用に向けて

第4回web技術勉強会暗号技術編その2

ConFoo 2015 - Securing RESTful resources with OAuth2

Gradle

Gradle by Example

Gradle Introduction

An Introduction to Gradle for Java Developers

JWT The future-100--trends-and-change-to-watch-in-2016

Jwt Presentation

Stateless authentication for microservices

JSON Web Tokens

Saml vs Oauth : Which one should I use?

Semelhante a JSON Web Tokens (JWT)

Securing Your Atlassian Connect Add-on With JWTAtlassian

Token based-oauth2andreyradzkov

Ignite Talk: I AM a robot, how do I log in?VMware Tanzu

Jwt SecuritySeid Yassin

I Don't Care About Security (And Neither Should You)Joel Lord

Semelhante a JSON Web Tokens (JWT) (6)

Securing Your Atlassian Connect Add-on With JWT

Token based-oauth2

Ignite Talk: I AM a robot, how do I log in?

Jwt Security

I Don't Care About Security (And Neither Should You)

Mais de Vladimir Dzhuvinov

Криптография за уеб и мобилни разработчициVladimir Dzhuvinov

New moneyVladimir Dzhuvinov

Mind patterns and anti-patternsVladimir Dzhuvinov

Cross-domain requests with CORSVladimir Dzhuvinov

Protecting web APIs with OAuth 2.0Vladimir Dzhuvinov

OpenID Connect ExplainedVladimir Dzhuvinov

Plovdev 2013: How to be a better programmer, beyond programmingVladimir Dzhuvinov

Binding components, events + data sources in HTML + JSVladimir Dzhuvinov

Mais de Vladimir Dzhuvinov (8)

Криптография за уеб и мобилни разработчици

New money

Mind patterns and anti-patterns

Cross-domain requests with CORS

Protecting web APIs with OAuth 2.0

OpenID Connect Explained

Plovdev 2013: How to be a better programmer, beyond programming

Binding components, events + data sources in HTML + JS

Último

Developing An App To Navigate The Roads of BrazilV3cube

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

Partners Life - Insurer Innovation Award 2024The Digital Insurer

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsRoshan Dwivedi

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEarley Information Science

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays

Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...gurkirankumar98700

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

Scaling API-first – The story of a global engineering organizationRadu Cotescu

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

08448380779 Call Girls In Diplomatic Enclave Women Seeking MenDelhi Call girls

JSON Web Tokens (JWT)

1. JSON Web Token (JWT) For self-contained access and other tokens OAuth 2.0 | OpenID Connect | … Verifiable with signature, encryptable Base64URL encoded

2. {"iss" "sub" "aud" "exp" "nbf" "iat" "jti" : : : : : : : "https://myserver.net", "alice@wonderland.net", [ "https://myapi.com", ... ], 1364293137871, 1364292537871, 1364292537871, "165a7bab-de06-4695-a2dd-9d8d6b40e443"} ---> eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhHQ00ifQ.K52jFwA QJHDxMhtaq7sg5tMuot_mT5dm1DR_01wj6ZUQQhJFO02vPI44W5nDj C5C_v4pW1UiJa3cwb5y2Rd9kSvb0ZxAqGX9c4Z4zouRU57729ML3V0 5UArUhck9ZvssfkDW1VclingL8LfagRUs2z95UkwhiZyaKpmrgqpKX 8azQFGNLBvEjXnxxoDFZIYwHOno290HOpig3aUsDxhsioweiXbeLXx LeRsivaLwUWRUZfHRC_HGAo8KSF4gQZmeJtRgai5mz6qgbVkg7jPQy ZFtM5_ul0UKHE2y0AtWm8IzDE_rbAV14OCRZJ6n38X5urVFFE5sdph dGsNlA.gjI_RIFWZXJwaO9R.oaE5a0N1MW9FBkhKeKeFa5e7hxVXOu ANZsNmBYYT8G_xlXkMD0nz4fIaGtuWd3t9XpkufvvfDxOnAs2SBX_Y 1kYGPto4mibBjIrXQEjDsKyKwndxzrutN9csmFwqWhx1sLHMpJkgsn fLTi9yWBPKH5Krx23IhoDGoSfqOquuhxn0y0Wk

3. GET /protected-resource.html HTTP/1.1 Host: myapi.com Authorization Bearer eyJhbGciOiJSU0EtT0FFUC...

4. Resources ● Java Script Object Signing and Encryption (JOSE) IETF WG: – – JSON Web Signature (JWS) – JSON Web Encryption (JWE) – ● JSON Web Algorithms (JWA) JSON Web Keys (JWK) Nimbus JOSE+JWT library @Bitbucket: https://bitbucket.org/nimbusds/nimbus-jose-jwt/

JSON Web Tokens (JWT)

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Destaque

Destaque (18)

Semelhante a JSON Web Tokens (JWT)

Semelhante a JSON Web Tokens (JWT) (6)

Mais de Vladimir Dzhuvinov

Mais de Vladimir Dzhuvinov (8)

Último

Último (20)

JSON Web Tokens (JWT)