JSON Web Token - Revision history

Rice at 21:33, 27 April 2024

2024-04-27T21:33:12Z

@@ Line 1: / Line 1: @@
-'''JSON Web Token''' (JWT) allows client to indicate its identity for further exchanges after authentication.
+'''JSON Web Token''' (JWT) is a string composed by the server and stored on the browser that allows client to indicate its identity for further exchanges after authentication (authorization).
-* It is compact and self-contained
+JWT base64 string consisting of a header for metadata, a payload for session information, and a signature to ensure that the JWT is not tampered by anyone. The specifics would be covered in the ''Structure'' section.
-It looks something like this<pre>
+Notably, JWT is compact and self-contained in contrast to traditional session management. It is a way to operate a stateless server. That is, no session information would be stored on the server, as everything is encoded in the JWT. More advatanges will be in the ''Advantages'' section.
 [Base64(HEADER)].[Base64(PAYLOAD)].[Base64(SIGNATURE)]
 </pre><pre>
@@ Line 10: / Line 14: @@
 eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.
 TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ
-</pre>It is a way to operate a stateless server.
+</pre>The '''header''' contains the type of the token (JWT) and the algorithm used to ''sign'' it. It is encoded in ''Base64Url.'' The next two sections is a bit more complicated.
 = Sources =

Rice at 23:40, 7 March 2024

2024-03-07T23:40:56Z

← Older revision		Revision as of 23:40, 7 March 2024
Line 16:		Line 16:
	* https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html		* https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html
	* https://jwt.io/		* https://jwt.io/

			[[Category:Cybersecurity]]

Rice at 23:40, 7 March 2024

2024-03-07T23:40:32Z

← Older revision		Revision as of 23:40, 7 March 2024
Line 10:		Line 10:
	eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.		eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.
	TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ		TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ
	</pre>		</pre>It is a way to operate a stateless server.

	= Sources =		= Sources =

Rice: Created page with "'''JSON Web Token''' (JWT) allows client to indicate its identity for further exchanges after authentication. * It is compact and self-contained * It can be signed with a secret (HMAC) or a public/private key pair (RSA) It looks something like this

 [Base64(HEADER)].[Base64(PAYLOAD)].[Base64(SIGNATURE)]

 eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9. eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9. TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ..."

2024-03-07T23:38:51Z

Created page with "'''JSON Web Token''' (JWT) allows client to indicate its identity for further exchanges after authentication. * It is compact and self-contained * It can be signed with a secret (HMAC) or a public/private key pair (RSA) It looks something like this<pre> [Base64(HEADER)].[Base64(PAYLOAD)].[Base64(SIGNATURE)] </pre><pre> eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9. eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9. TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ..."

New page

'''JSON Web Token''' (JWT) allows client to indicate its identity for further exchanges after authentication.

* It is compact and self-contained
* It can be signed with a secret (HMAC) or a public/private key pair (RSA)

It looks something like this<pre>
[Base64(HEADER)].[Base64(PAYLOAD)].[Base64(SIGNATURE)]
</pre><pre>
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.
eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.
TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ
</pre>

= Sources =

* https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html
* https://jwt.io/