JWT Fundamentals

Focused View

Scott Brady

2:28:43

105 View

1. Course Overview

1. Course Overview.mp4

01:39

2. Why JSON Web Tokens (JWTs)

1. Overview.mp4

01:10

2. What Is a JWT.mp4

04:48

3. The JWT Use Case.mp4

08:36

4. How JWTs Are Typically Used.mp4

05:38

5. When to Use JWTs.mp4

03:20

6. When Not to Use JWTs.mp4

06:39

7. The JOSE Standards.mp4

04:14

8. Summary.mp4

01:32

03. Using JSON Web Tokens (JWTs)

01. Overview.mp4

01:16

02. How to Create a JWT.mp4

06:34

03. How to Validate a JWT.mp4

03:04

04. Using Standard Claim Types for Common JWT Functionality.mp4

07:02

05. JWTs in Use - OpenID Connects Identity Token.mp4

05:53

06. JWTs in Use - JWT Profile for OAuth Access Tokens.mp4

04:32

07. Useful JWT Tools.mp4

02:38

08. JWT Libraries.mp4

01:01

09. Demo - JWTs in Python with Authlib.mp4

03:17

10. Demo - JWTs in JavaScript with jose.mp4

03:18

11. Demo - JWTs in C# with Microsoft.IdentityModel.mp4

03:19

12. Summary.mp4

01:42

4. JSON Web Signature (JWS) in Depth

1. Overview.mp4

01:22

2. Understanding Digital Signatures and Signing Keys.mp4

03:01

3. JSON Web Algorithms (JWA) and JWS.mp4

03:50

4. Signing Algorithm - RSASSA-PKCS1-v1_5 (e.g. RS256).mp4

03:06

5. Signing Algorithm - RSASSA-PSS (e.g. PS256).mp4

01:28

6. Signing Algorithm - ECDSA (e.g. ES256).mp4

04:12

7. Signing Algorithm - EdDSA.mp4

01:58

8. Digital Signatures vs. Message Authentication Codes (e.g. HS256).mp4

02:12

9. Summary.mp4

01:31

5. JSON Web Encryption (JWE) in Depth

1. Overview.mp4

00:56

2. Understanding Encryption.mp4

03:20

3. JWT Encryption with JWE.mp4

06:09

4. When to Use JWE.mp4

02:00

5. Choosing the Right Encryption Algorithm.mp4

04:06

6. Summary.mp4

01:15

6. JWT Security Best Practices

1. Overview.mp4

01:19

2. Trust No One, Rely on Existing Relationships.mp4

05:35

3. Rely on Standardized Claims to Prevent Misuse.mp4

02:07

4. JWT Revocation.mp4

04:12

5. Proof of Possession.mp4

04:14

6. Alternatives to JWTs.mp4

08:12

7. Summary.mp4

01:26

Description

JSON Web Token (JWT) is a standard that allows you to securely transmit data between parties as a self-contained JSON object. This course will teach you exactly how JWTs work and how best to use them, regardless of your programming language or framework.

What You'll Learn?

JSON Web Tokens (JWT) are a security token format popular in protocols such as OAuth2 and OpenID Connect. In this course, JWT Fundamentals, you’ll learn about the JSON Web Token (JWT) standards and how to use them effectively. First, you’ll explore why JWTs exist, when to use them, and when not to. Next, you’ll discover how JWTs are protected using signing and encryption. Finally, you’ll learn security best practices for using and validating JWTs. When you’re finished with this course, you’ll have the skills and knowledge of JWTs needed to use them effectively in any programming language or framework.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Web Development

Scott Brady

Instructor's Courses

Scott Brady is a software developer specializing in identity and access management. Focusing on ASP.NET, Scott has increasingly found himself in undocumented territory, piecing together the facts and attempting to pass them on so that others don't have to go through the same. Scott currently work as a Senior Software Engineer for Rock Solid Knowledge and is a contributor to the IdentityServer OSS project, the leading OpenID Connect and OAuth framework for .NET.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.