How JSON Web Tokens Work and Can be Used to Secure Your Single Page Apps

on YouTube ↗25m

" summary

Explains how JWTs pack claims, expiry and audience into a base64 JSON trio and how a signature prevents tampering, showing header.payload.signature structure, common claims (iss, sub, aud, exp) and symmetric vs asymmetric signing with JWKS discovery. Recommends OAuth2 + OpenID Connect flows, warns that implicit flow is deprecated and that single‑page apps should prefer authorization code + PKCE while avoiding refresh tokens unless rotating/ sender‑constrained and don't store sensitive data in tokens.

AI-written summary · about

" chapters (7)

1. 0:00Intro
2. 1:00Traditional Authentication
3. 4:00Initial Authentication
4. 8:00JSON Web Tokens
5. 12:20Examples
6. 14:40Comparison
7. 18:40Tokenbased Authentication

" related talks

• 34mAuthenticating your single page apps using JSON Web TokensSam Bellen · apidays Singapore 2019
• 40mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · GrillJS 2019
• 22mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · foss-north 2019
• 29mKnock knock, who's there? Authenticating your single page apps using JSON Web TokenSam Bellen · AngularDay 2019
• 40mKnock knock, who’s there? Authenticating your single page apps using JSON Web TokensSam Bellen · FrontCon 2019
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 26mSecuring Single Page Applications with Token Based AuthenticationStefan Achtsnit · WeAreDevelopers Conference Vienna 2016
• 34mWhat makes JSON Web Tokens (JWT) secure?Siddharth Kshetrapal · JSFoo 2018