Course Outline
Introduction
- JWT structure overview.
- Common use cases for JWT.
JWT Validation
- Symmetric token signatures.
- Asymmetric token signatures.
- Token validation processes.
- Claim validation.
Securing Against Stolen JWTs
- Strategies for handling compromised JWTs.
- Secure JWT storage methods.
- JWT invalidation techniques.
Managing Cryptographic Keys
- Overview of secret keys.
- Embedding the public key.
- Incorporating a URL that points to the key.
JWT Security Vulnerabilities
- Brute force attacks.
- Algorithm confusion: modifying RS256 to HS256.
- The 'none' algorithm vulnerability.
Summary and Next Steps
Requirements
- Fundamental knowledge of web services.
Audience
- Software Developers.
Testimonials (5)
The patience with which he addressed the questions that arose
Carlos Ceballos - Banco de Mexico
Course - Spring Boot, React, and Redux
Machine Translated
The lessons was very interactive and the excersices was good practical
Heino - NWK Limited
Course - Laravel and Vue.js
I am glad we can get the recordings, slides and files zipped to us so we can always reference back to them when needed. David explained concepts clearly and was able to answer questions that we had. He was very knowledgeable.
Renee Chan - Mackenzie Investments
Course - Vue.js
practice exercises
Mateusz - DPDgroup IT Solutions sp. z o.o.
Course - React Native for iOS and Android
The vue.js is something that I never worked with and the presentation clarified few of my doubts. But again, online courses are not efficient in acquiring knowledge.
