Tag jwt
Post details
It has been 167 days since the last alg=none JWT vulnerability.
by 
Jamie Tanna
.
#jwt.
Post details
Implementation of various JWx (Javascript Object Signing and Encryption/JOSE) technologies - GitHub - lestrrat-go/jwx: Implementation of various JWx (Javascript Object Signing and Encryption/JOSE) ...
by Jamie Tanna
.
#go
#jose
#jwt.
Pretty Printing JSON Web Tokens (JWTs) on the Command Line using Go (2 mins read).
How to easily introspect and pretty print a signed JWT (JWS) or an encrypted JWT (JWE) on the command line using Go.
by Jamie Tanna
.
#blogumentation
#go
#command-line
#jwt
#json
#pretty-print.
Recommended read: API Tokens: A Tedious Survey https://fly.io/blog/api-tokens-a-tedious-survey/
by Jamie Tanna
.
#authentication
#authorization
#jwt
#paseto
#oauth
#oauth2.
Decrypting Encrypted JSON Web Tokens (JWE) with Ruby (1 mins read).
How to use Ruby to decrypt encrypted JSON Web Token objects.
by Jamie Tanna
.
#blogumentation
#ruby
#jwt.
Post details
Filippo Valsorda 💉💉🎉 (@FiloSottile)Tue, 01 Jun 2021 12:14 +0000
by Jamie Tanna
.
#memes
#jwt.
Recommended read: Biscuit, the foundation for your authorization systems https://www.clever-cloud.com/blog/engineering/2021/04/12/introduction-to-biscuit/
by Jamie Tanna
.
#oauth2
#oauth
#security
#jwt
#paseto
#authorization.
Recommended read: JWT Token Debugger https://token.dev/
by Jamie Tanna
.
#jwt.
Recommended read: JWT jku&x5u = ❤️ by @snyff #NahamCon2020 https://youtu.be/VA1g7YV8HkI
by Jamie Tanna
.
#jwt.
Creating Signed JOSE Objects with Ruby (1 mins read).
How to use ruby-jose to create a signed JSON Object Signing and Encryption (JOSE) object on the command-line.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#jose.
Recommended read: Are You Properly Using JWTs? - Dmitry Sotnikov https://www.youtube.com/embed/M3jA0bGDCso
Recommended read: Hardcoded secrets, unverified tokens, and other common JWT mistakes https://r2c.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/
by Jamie Tanna
.
#jwt
#security.
Generating the Client Assertion JWT for private_key_jwt Authentication with Ruby (1 mins read).
A helper script to generate the client assertion required to authenticate to an Authorization Server that supports private_key_jwt, on the command-line with Ruby.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json
#oidc.
Verifying Signed JWTs (JWS) with Ruby (2 mins read).
Using the ruby-jwt library to verify a signed JSON Web Token (JWS) on the command-line.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json.
Creating Signed JWTs (JWS) with Ruby (1 mins read).
Using the json-jwt and ruby-jwt libraries to sign a JSON Web Token on the command-line.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json.
Recommended read: JWT is Awesome: Here's Why https://thehftguy.com/2020/02/18/jwt-is-awesome-heres-why/
by Jamie Tanna
.
#jwt.
Creating Signed JWTs (JWS) with Node.JS (1 mins read).
How to use the jsonwebtoken library to create a Signed JSON Web Token (JWS) with Node.JS.
by Jamie Tanna
.
#blogumentation
#nodejs
#command-line
#jwt
#json.
Recommended read: No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid
by Jamie Tanna
.
#jwt.
Recommended read: Critical vulnerabilities in JSON Web Token libraries https://www.chosenplaintext.ca/2015/03/31/jwt-algorithm-confusion.html
by Jamie Tanna
.
#jwt.
Recommended read: Hacking JSON Web Tokens (JWTs) https://medium.com/swlh/hacking-json-web-tokens-jwts-9122efe91e4a
by Jamie Tanna
.
#jwt
#security.
Recommended read: JWTs? JWKs? ‘kid’s? 'x5t's? Oh my! https://redthunder.blog/2017/06/08/jwts-jwks-kids-x5ts-oh-my/
by Jamie Tanna
.
#jwt.
Recommended read: A Thorough Introduction to PASETO https://developer.okta.com/blog/2019/10/17/a-thorough-introduction-to-paseto
by Jamie Tanna
.
#authentication
#authorization
#oauth2
#oidc
#paseto
#jwt.
Pretty Printing JSON Web Tokens (JWTs) on the Command Line using OpenSSL (3 mins read).
How to easily introspect a JWT on the command line using OpenSSL and optionally Python for real pretty-printing.
by Jamie Tanna
.
#blogumentation
#python
#command-line
#jwt
#json
#pretty-print.
Verifying Signed JWTs (JWS) with Node.JS (3 mins read).
How to use the jsonwebtoken and node-jose libraries to verify the signature of a Signed JSON Web Token (JWS) with Node.JS.
by Jamie Tanna
.
#blogumentation
#nodejs
#command-line
#jwt
#json.
Pretty Printing JSON Web Tokens (JWTs) on the Command Line using Ruby (3 mins read).
How to easily introspect and pretty print a signed JWT (JWS) or an encrypted JWT (JWE) on the command line using Ruby's standard library, or using the ruby-jwt external library.
by Jamie Tanna
.
#blogumentation
#ruby
#command-line
#jwt
#json
#pretty-print.
You're currently viewing page 1 of 1, of 33 posts.