Downloaded 10 times
Uploaded byStormpath
JWTs for CSRF and Microservices
The document outlines a presentation on using JWTs (JSON Web Tokens) for CSRF (Cross-Site Request Forgery) protection in microservices, featuring a detailed agenda and key speakers from Stormpath. It includes discussions about security best practices, coding guidelines for JWTs, and integration options with various identity services. Additional resources such as GitHub repositories and informative links on microservices are also provided.
More Related Content
JWTs for CSRF and Microservices
- 1.
- 2. Welcome! • Agenda • Stormpath101 (5 mins) • JWT with CSRF & Microservices (40 mins) • Q&A (15 mins) • Claire Hunsaker VP of Marketing • Micah Silverman Java Developer Evangelist
- 3. Speed to Market& Cost Reduction • Complete Identity solution out-of-the-box • Security best practices and updates by default • Clean & elegant API/SDKs • Little to code, no maintenance
- 4. Stormpath User Management UserData User Workflows Google ID Your Applications Application SDK Application SDK Application SDK ID Integrations Facebook Active Directory SAML
- 5. Let’s talk aboutCSRF!
- 6. encodeSecret = "4pE8z3PBoHjnV1AhvGk+e8h2p+ShZpOnpr8cwHmMh1w=" computeHMACSHA256( header +"." + payload, base64DecodeToByteArray(encodedSecret) ) Signature Computation Pseudo-code
- 7.
- 8.
- 9.
- 10.
- 11. "Microservices are awesome, butthey're not free." - Les Hazlewood, Stormpath CTO
- 12.
- 13.
- 14. Resources • Repos usedin today’s preso: ○ github.com/jwtk/jjwt ○ github.com/stormpath/roadstorm-jwt-csrf-tutorial ○ github.com/stormpath/roadstorm-jwt-microservices-tutorial • JJWT Guest Post on Baeldung - bit.ly/29ZPZAd • Stormpath Microservices Screencast - bit.ly/29Wi6iw • JWT Inspector - jwtinspector.io • HTTPie - github.com/jkbrzt/httpie • What are Microservices? ○ martinfowler.com/articles/microservices.html • @afitnerd @goStormpath support@stormpath.com