Tokens Instead of Cookies Thanks to JWT

on YouTube ↗40m

" summary

The talk evaluates replacing session cookies with JSON Web Tokens (JWT) in modern microservice and distributed application architectures, focusing on CSRF and CORS concerns. It examines whether tokens and the JWT standard deliver a practical alternative to cookies for web applications.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 3:17Cookie problems
3. 7:37JWT benefits
4. 10:11JWT structure and security
5. 13:14Live JWT demo
6. 22:27Security risks and fixes
7. 26:57Comparison and recommendations
8. 30:25Conclusion
9. 31:28Q&A

" related talks

• 27mCookies versus tokens: a paradoxical choicePhilippe De Ryck · NG-BE 2017
• 15mJWTs And Why They SuckRory M · BSides London 2021
• 32mPortable Sessions with JSON Web TokensLance Ivy · RailsConf 2017
• 34mStateless Auth w/ JSON Web TokensDamir Svrtan · Southeast Ruby 2017
• 04mJSON Web TokensMartin Gontovnikas · dotJS 2014
• 38mAuthentication as a Microservice: Portable Customer Identity ManagementBrian Pontarelli · OWASP AppSec USA 2018
• 54mJSON Web Tokens SuckRandall Degges · CodeMash 2018
• 45mJWT - To authentication & beyond!Luís Cobucci · Laracon EU 2017