Knock knock, who's there? Authenticating your single page apps using JSON Web Tokens

on YouTube ↗22m

" summary

Explains exactly what a JWT contains and how to use one: the header/payload/signature structure, how signatures prevent tampering, and how to verify tokens via a jwks endpoint. Demonstrates a single‑page app + Auth0 using OpenID Connect to return ID and access tokens and shows calling an API with a Bearer token. Recommends the authorization code with PKCE flow, stores tokens in memory not localStorage, and warns that revocation still requires a blacklist or server state.

AI-written summary · about

" chapters (12)

1. 0:00Start
2. 2:33Traditional Authentication
3. 4:45What Are some of the Problems with Traditional Cookie Based Approach
4. 6:56Json Web Tokens
5. 7:11Parts of Json Web Token
6. 7:57Payload
7. 8:51Public Claim
8. 9:23Private Claims
9. 9:46Signature
10. 16:07Are There some Downsides to the Json Web Tokens
11. 16:22Invalidation of Tokens
12. 17:00Token-Based Authentication

" related talks

• 29mKnock knock, who's there? Authenticating your single page apps using JSON Web TokenSam Bellen · AngularDay 2019
• 40mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · GrillJS 2019
• 40mKnock knock, who’s there? Authenticating your single page apps using JSON Web TokensSam Bellen · FrontCon 2019
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 34mAuthenticating your single page apps using JSON Web TokensSam Bellen · apidays Singapore 2019
• 25mHow JSON Web Tokens Work and Can be Used to Secure Your Single Page AppsSam Bellen · apidays Helsinki 2019
• 26mSecuring Single Page Applications with Token Based AuthenticationStefan Achtsnit · WeAreDevelopers Conference Vienna 2016
• 30mStandards-based authentication for JavaScript sitesKim Maida · backendlessConf_ 2019