Knock knock, who’s there? Authenticating your single page apps using JSON Web Tokens

on YouTube ↗40m

" summary

Explains exactly what a JSON Web Token contains, how to sign and verify it with JWT structure (header payload signature), and when an access token is actually usable versus expired or tampered with; demos a cats/dogs API that refuses requests without a valid bearer token and shows signature/expiry checks working. Compares opaque tokens, describes JWK public‑key verification, recommends PKCE over implicit, and demos passwordless login using WebAuthn with a USB key and Touch ID.

AI-written summary · about

" chapters (15)

1. 0:00Start
2. 3:37Multi Architecture
3. 4:26What Are some of the Problems with a Traditional Cookie Based Approach
4. 4:59Cookies Require State
5. 6:05What Is a Token
6. 6:48Access Token
7. 7:36Json Web Token
8. 9:41Reserved Claims
9. 9:56Public Claims
10. 10:29Private Claims
11. 11:51Json Web Tokens Can Be Verified
12. 20:30Strengths of Json Web Tokens
13. 22:09Are There some Downsides to Jason Up Tokens
14. 30:31Future of Authentication
15. 36:53How Screwed Are You if You Lose Your Authenticator Device

" related talks

• 29mKnock knock, who's there? Authenticating your single page apps using JSON Web TokenSam Bellen · AngularDay 2019
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 22mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · foss-north 2019
• 40mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · GrillJS 2019
• 34mAuthenticating your single page apps using JSON Web TokensSam Bellen · apidays Singapore 2019
• 25mHow JSON Web Tokens Work and Can be Used to Secure Your Single Page AppsSam Bellen · apidays Helsinki 2019
• 11mDemystifying JWTsDominika Bobik · SFSCON 2024
• 43mDo You Really Know JWT?Karim Pinchon · Devoxx France 2022