Opening Doors with JSON Web Tokens

on YouTube ↗46m

" summary

Shows a working prototype that grants remote, offline-capable access by writing JWTs to NFC and verifying them locally on a Raspberry Pi door lock. Uses OAuth with PKCE, OpenID Connect device flow and RS256 verification, an Android NFC writer, Python on a Pi driving a servo, and public keys baked into the device. Key details: NFC tags have only 888 bytes (JWTs ~780 bytes), tokens are short-lived (demo uses 60 seconds), live demo unlocks and re-locks successfully despite flaky peripherals.

AI-written summary · about

" chapters (10)

1. 0:00Start
2. 1:38Amazon Lock
3. 3:47The Amazon Lock
4. 6:57Bluetooth Jammer
5. 10:38How Does the Solution Work
6. 11:04Oauth Code Flow
7. 13:02Auth Code
8. 20:58Well-Known Url
9. 32:22Device Flow
10. 34:56What Happens under the Hood

" related talks

• 41mOpening Doors with JSON Web TokensBen Dechrai · PyCon AU 2019
• 37mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · Jfokus 2019
• 40mKnock knock, who’s there? Authenticating your single page apps using JSON Web TokensSam Bellen · FrontCon 2019
• 29mKnock knock, who's there? Authenticating your single page apps using JSON Web TokenSam Bellen · AngularDay 2019
• 32mPortable Sessions with JSON Web TokensLance Ivy · RailsConf 2017
• 40mKnock knock, who's there? Authenticating your single page apps using JSON Web TokensSam Bellen · GrillJS 2019
• 26mMerging Passwordless and Physical Access ControlRita Mounir · Authenticate 2022
• 45mOAuth and beyond: Modern auth not only for the webFilip Koňařík, Dušan Jakub · GeeCON Prague 2023