Course Outline
Introduction
- Overview of JWT structure
- Common JWT use cases
JWT Validation
- Symmetric token signatures
- Asymmetric token signatures
- Token validation procedures
- Claim validation
Securing Against Stolen JWTs
- Strategies for managing compromised JWTs
- JWT storage best practices
- Methods for invalidating JWTs
Managing Cryptographic Keys
- Overview of secret keys
- Incorporating the public key
- Utilizing a URL to reference the key
JWT Vulnerabilities and Hacking Techniques
- Brute force attacks
- Algorithm confusion: Altering RS256 to HS256
- Exploiting the 'none' algorithm
Summary and Next Steps
Requirements
- Foundational understanding of web services
Target Audience
- Developers
Testimonials (5)
The lessons was very interactive and the excersices was good practical
Heino - NWK Limited
Course - Laravel and Vue.js
I am glad we can get the recordings, slides and files zipped to us so we can always reference back to them when needed. David explained concepts clearly and was able to answer questions that we had. He was very knowledgeable.
Renee Chan - Mackenzie Investments
Course - Vue.js
practice exercises
Mateusz - DPDgroup IT Solutions sp. z o.o.
Course - React Native for iOS and Android
The vue.js is something that I never worked with and the presentation clarified few of my doubts. But again, online courses are not efficient in acquiring knowledge.
Bogdan Stoica - EMAG IT Research S.R.L
Course - Advanced Vue.js
His ability to explain complex concept in simpler terms. Giving an overview of how everything ties together and how we can best apply these in our work scenarios
