JWT in GO

Simple walkthrough of JWT with a sample app

Transcript

1. JWTs Yamil Asusta
 Developer Evangelist" @elbuo8
2. eyJhbGciOiJIUzI1NiIsInR5cCI6IkpX VCJ9.eyJuYW1lIjoiWWFtaWwgQ XN1c3RhIiwicm9sZSI6IkRldmVsb3 BlciBFdmFuZ2VsaXN0IiwibG9jYX Rpb24iOiJOWUMgJiBQUiIsImxpa2 VzIjpbIkJlZXIiLCJUcmF2ZWxpbmci LCJQcm9ncmFtbWluZyJdfQ.9k- YwDwlrwMtNNCQ1YGkMldF8sS6 ZOTTAnhvE39WFPo
3. JSON Web Token (JWT)
4. JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS). IETF
5. eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoiWWFtaWwgQ XN1c3RhIiwicm9sZSI6IkRldmVsb3BlciBFdmFuZ2VsaXN0IiwibG9jY XRpb24iOiJOWUMgJiBQUiIsImxpa2VzIjpbIkJlZXIiLCJUcmF2ZWxpb mciLCJQcm9ncmFtbWluZyJdfQ.9k- YwDwlrwMtNNCQ1YGkMldF8sS6ZOTTAnhvE39WFPo
6. eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9
7. {" "alg": "HS256"," "typ": "JWT"" }
8. eyJuYW1lIjoiWWFtaWwgQXN1c3RhIiwicm9sZSI6IkRldm Vsb3BlciBFdmFuZ2VsaXN0IiwibG9jYXRpb24iOiJOWUMg JiBQUiIsImxpa2VzIjpbIkJlZXIiLCJUcmF2ZWxpbmciLCJQc m9ncmFtbWluZyJdfQ
9. { "name": "Yamil Asusta", "role": "Developer Evangelist", "location": "NYC & PR", "likes": [ "Beer", "Traveling", "Programming" ] }
10. 9k- YwDwlrwMtNNCQ1YGkMldF8sS6ZOTTAnhvE39WFPo
11. How do I generate the token?
12. base64(headers) + “.” + base64(claims) + “.” +" sign(claims, secret)
13. Why?
14. User User App Session Store(s) App JWT Approach Cookie Approach
15. To the code!
16. /dgrijalva/jwt-go
17. /codegangsta/negroni
18. $ openssl genrsa -out demo.rsa 1024" " $ openssl rsa -in demo.rsa -pubout > demo.rsa.pub