JSON Web Tokens

DSM Web Geeks 8/8/2016

Transcript

1. JSON Web Tokens (JWT) Zach Taylor, Shift Interactive
2. JSON what the heck is that?
3. Web we know what this means! not necessarily web means it’s compact and easy to use: URL, POST parameters, headers
4. Token symbol? representation? lots of uses of the word token in computing
5. Claim • “Claim” - a statement that one subject, such as a person or organization, makes about itself or another subject (Wikipedia) so it’s saying something BUT, how do we know these claims are true? how do we know that someone didn’t change this statement?
6. Claim
7. Signing Data Signature Private Key Hash Function in goes your claim, out comes your signature a unique symbol of your claim
8. JSON Web Token • Header • Payload • Signature https://jwt.io base64 encoded and connected by periods (url safety) header - metadata payload - your data in JSON format
9. Questions?