Json web token

Json web token

• 1.
  JSON Web Token(JWT)
• 2.
  MAYANK PATEL APPLICATION ARCHITECT- OILDEX, A SERVICE OF TRANSZAP /Linkedin @maxy_ermayank
• 3.
  What is JWT? JSONWeb Tokens (JWT) are an open, industry standard RFC 7519 method for representing claims securely between two parties.
• 4.
  A string representinga set of claims as a JSON object that is encoded in a JWS or JWE, enabling the claims to be digitally signed or MACed and/or encrypted.
• 5.
  When should youuse JSON Web Tokens?
• 6.
  Authentication This is themost common scenario for using JWT. Once the user is logged in, each subsequent request will include the JWT, allowing the user to access routes, services, and resources that are permitted with that token.
• 7.
  Authentication (Cont.) Single SignOn is a feature that widely uses JWT nowadays, because of its small overhead and its ability to be easily used across different domains.
• 8.
  Information Exchange JSON WebTokens are a good way of securely transmitting information between parties, because as they can be signed, for example using public/private key pairs, you can be sure that the senders are who they say they are.
• 9.
  Information Exchange (Cont.) Additionally,as the signature is calculated using the header and the payload, you can also verify that the content hasn't been tampered with.
• 10.
  WHAT IS THEJSON WEB TOKEN STRUCTURE? JSON Web Tokens consist of three parts separated by dots (.), which are: Header Payload Signature
• 11.
  Example xxxxx.yyyyy.zzzzz
• 12.
  JWT Process
• 13.
  PROS AND CONS Standard Scalable Stateless Distributable Web,Desktop and Mobile ready A means to provide granular access control Secure against certain kinds of attacks, like CSRF, and many others. 64Bit encoding
• 14.
  JWT.IO JWT.IO allows youto decode, verify and generate JWT.
• 15.
  Using JSON WebTokens as API Keys
• 16.
  Glossary
• 17.
  JSON Web Signature(JWS)
• 18.
  Digital Signature
• 19.
  Message Authentication Code(MAC)
• 20.
  JWS Compact Serialization
• 21.
  JWS Payload
• 22.
  JSON Web Encryption(JWE)
• 23.
  Thank You!!!