Authentication - 401-advanced-javascript-billybunn/seattle-javascript-401d29 GitHub Wiki

Intro to JSON Web Tokens

JSON web tokens are abbreviated JWT. They're a way of securely transmitting data between parties with JSON objects. They're secure because they're digitally "signed" using a "secret" or with a "key".

JWTs are used to authorize users who have signed-in to access otherwise restricted routes, services and resources. They're also a used to securely exchange information.

Resources

JWTs have 3 main parts:

• header
• payload
• signature

Resource

Read

• Read securing passwords
• Read basic auth
• Read intro to jwt
• Read OWASP auth cheatsheet

Bookmark

• bcrypt docs
• jsonwebtoken docs