Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

JWT Security: Attacks & Defenses

via CodeSignal

Go to class Write review

Overview

This course teaches how to secure JSON Web Tokens (JWTs) in web applications. You’ll learn about common JWT vulnerabilities, attack techniques, and best practices for safe authentication and token management, using an offense-defense approach with hands-on TypeScript examples.

Syllabus

  • Unit 1: Introduction to JWT Security
    • Understanding JWT Anatomy and Verification
    • Creating Your First JWT Token
    • Secure Cookie Based JWT Storage
    • Exploiting Unprotected Routes: A Hands-On Exercise
    • JWT Verification Middleware for Protected Routes
    • Implementing Protected Routes with JWT Authentication
  • Unit 2: Common JWT Vulnerabilities
    • Forging Tokens with None Algorithm
    • Fixing the None Algorithm Vulnerability
    • Strengthening JWT Secret Key Security
    • Replacing Weak Secrets with Strong Keys
  • Unit 3: Defending Against JWT Attacks
    • The Zombie Token Problem
    • Implementing Token Blacklist Security Check
    • Implementing Secure JWT Logout
    • Implementing Short Lived JWT Tokens
    • Automatic Blacklist Cleanup for JWT Security
  • Unit 4: Refresh Tokens and Secure Token Rotation
    • Implementing Short Lived Access Tokens
    • Implementing Refresh Token Storage and Generation
    • Implementing the Token Refresh Endpoint
    • Implementing Secure Token Rotation

Reviews

Start your review of JWT Security: Attacks & Defenses

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.