Skip to content

Authentication

Billy Bunn edited this page Apr 2, 2019 · 2 revisions

Intro to JSON Web Tokens

JSON web tokens are abbreviated JWT. They're a way of securely transmitting data between parties with JSON objects. They're secure because they're digitally "signed" using a "secret" or with a "key".

JWTs are used to authorize users who have signed-in to access otherwise restricted routes, services and resources. They're also a used to securely exchange information.

Resources

JWTs have 3 main parts:

  • header
  • payload
  • signature

Resource

Read

  • Read securing passwords
  • Read basic auth
  • Read intro to jwt
  • Read OWASP auth cheatsheet

Bookmark

  • bcrypt docs
  • jsonwebtoken docs