JWT, WTF? - Intermediate

12th July 2017 in London at CodeNode

There are 97 other SkillsCasts available from FullStack 2017 - the conference on JavaScript, Node & Internet of Things

Please log in to watch this conference skillscast.

644534408 640

We live in a world of rich client side applications, web and mobile, and we need a secure way to authenticate our users. Session IDs have been the traditional solution, but how well do they work for single page applications? And what about authenticating to 3rd party services? You can't leave your credentials in the client, there's always someone malicious just waiting to steal them.

Enter the JWT, or JSON Web Token. These fancy little tokens can authenticate our users and our transactions because they know what they're allowed to do.

Join Phil and discover what JWTs can be used for, why to choose JWTs, how to generate them, and most importantly how to keep them secure. Finally, you'll find out if putting abbreviations inside other abbreviations really is the secret to web security.


JWT, WTF? - Intermediate

Phil Nash

Phil is a developer evangelist for Twilio and a Google Developer Expert based in London. He loves building with APIs and can be found programming in a variety of languages including JavaScript, Ruby and Swift. Sometimes he makes his own beer, but he's more likely to be found discovering new ones around the world.