Course Outline
Introduction
- Overview of JWT structure
- Common JWT use cases
JWT Validation
- Symmetric token signature
- Asymmetric token signature
- Validating tokens
- Validating claims
Securing Stolen JWTs
- Handling stolen JWTs
- JWT storage strategies
- Invalidating JWTs
Managing a Cryptographic Key
- Overview of secret keys
- Embedding the public key
- Embedding a URL containing the key
JWT Vulnerabilities and Hacking
- Brute force approaches
- Modifying the algorithm from RS256 to HS256
- None algorithm approaches
Summary and Next Steps
Requirements
- Basic understanding of web services
Target Audience
- Developers
Testimonials (4)
Project folder and files with exercises all available to us with a virtual desktop, pair programming during the exercises
Jacob Flynn - Chemist4U
Course - React with Next.js
The patience with which he addressed the questions that arose
Carlos Ceballos - Banco de Mexico
Course - Spring Boot, React, and Redux
Machine Translated
The lessons was very interactive and the excersices was good practical
Heino - NWK Limited
Course - Laravel and Vue.js
I am glad we can get the recordings, slides and files zipped to us so we can always reference back to them when needed. David explained concepts clearly and was able to answer questions that we had. He was very knowledgeable.
