Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

JWTs and Why They Suck

Security BSides London via YouTube

Overview

Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the pitfalls and limitations of JSON Web Tokens (JWTs) in this 15-minute conference talk from Security BSides London. Delve into the reasons why JWTs may not be the ideal solution for many applications, covering topics such as irrevocability, excessive flexibility, and potential security risks. Learn about common misconceptions surrounding the necessity of JWTs and discover alternative approaches that may better suit your needs. Gain valuable insights into secure authentication and authorization practices, supported by references and practical recommendations.

Syllabus

Intro
how do i JWT
Irrevocable
JSON
YOU DON'T NEED IT
Too flexible
Footguns
Why you think you need JWTS
What to use instead
References

Taught by

Security BSides London

Reviews

Start your review of JWTs and Why They Suck

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.