What makes JSON Web Tokens (JWT) secure?

What is JSON Web Tokens (JWT) and Why Should You use JWT

What is JSON Web Token?

JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA.

There’s a lot you have to think about when building frontend applications - routing, performance, animations, etc. Security often takes the back seat (not cool!)

Between cookies, tokens, keeping users authenticated, and handling resource access, security can become quite tricky. Let’s look at the implementation detail and usage of the popular methods of authorization: JWT(JSON web tokens) and see what makes it secure in the first place?

Topics:

1. What is JWT?
2. When should you use JSON Web Tokens?
3. Structure + Implementation
4. Usage
5. What makes them secure?
6. Can JWT be hacked?

#jwt #javascript #web-development #security