Tag jwt
Hardcoded secrets, unverified tokens, and other common JWT mistakes
Recommended read: Hardcoded secrets, unverified tokens, and other common JWT mistakes https://r2c.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/
by 
Jamie Tanna
.
#jwt
#security.
Generating the Client Assertion JWT for private_key_jwt Authentication with Ruby (1 mins read).
A helper script to generate the client assertion required to authenticate to an Authorization Server that supports private_key_jwt, on the command-line with Ruby.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json
#oidc.
Verifying Signed JWTs (JWS) with Ruby (2 mins read).
Using the ruby-jwt library to verify a signed JSON Web Token (JWS) on the command-line.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json.
Creating Signed JWTs (JWS) with Ruby (1 mins read).
Using the json-jwt and ruby-jwt libraries to sign a JSON Web Token on the command-line.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json.
Recommended read: JWT is Awesome: Here's Why https://thehftguy.com/2020/02/18/jwt-is-awesome-heres-why/
by Jamie Tanna
.
#jwt.
Creating Signed JWTs (JWS) with Node.JS (1 mins read).
How to use the jsonwebtoken library to create a Signed JSON Web Token (JWS) with Node.JS.
by Jamie Tanna
.
#blogumentation
#nodejs
#command-line
#jwt
#json.
No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid
Recommended read: No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid
by Jamie Tanna
.
#jwt.
Critical vulnerabilities in JSON Web Token libraries
Recommended read: Critical vulnerabilities in JSON Web Token libraries https://www.chosenplaintext.ca/2015/03/31/jwt-algorithm-confusion.html
by Jamie Tanna
.
#jwt.
Hacking JSON Web Tokens (JWTs)
Recommended read: Hacking JSON Web Tokens (JWTs) https://medium.com/swlh/hacking-json-web-tokens-jwts-9122efe91e4a
by Jamie Tanna
.
#jwt
#security.
JWTs? JWKs? ‘kid’s? 'x5t's? Oh my!
Recommended read: JWTs? JWKs? ‘kid’s? 'x5t's? Oh my! https://redthunder.blog/2017/06/08/jwts-jwks-kids-x5ts-oh-my/
by Jamie Tanna
.
#jwt.
A Thorough Introduction to PASETO
Recommended read: A Thorough Introduction to PASETO https://developer.okta.com/blog/2019/10/17/a-thorough-introduction-to-paseto
by Jamie Tanna
.
#authentication
#authorization
#oauth2
#oidc
#paseto
#jwt.
Pretty Printing JSON Web Tokens (JWTs) on the Command Line using OpenSSL (3 mins read).
How to easily introspect a JWT on the command line using OpenSSL and optionally Python for real pretty-printing.
by Jamie Tanna
.
#blogumentation
#python
#command-line
#jwt
#json
#pretty-print.
Verifying Signed JWTs (JWS) with Node.JS (3 mins read).
How to use the jsonwebtoken and node-jose libraries to verify the signature of a Signed JSON Web Token (JWS) with Node.JS.
by Jamie Tanna
.
#blogumentation
#nodejs
#command-line
#jwt
#json.
Pretty Printing JSON Web Tokens (JWTs) on the Command Line using Ruby (3 mins read).
How to easily introspect and pretty print a signed JWT (JWS) or an encrypted JWT (JWE) on the command line using Ruby's standard library, or using the ruby-jwt external library.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json
#pretty-print.