JSON Web Tokens Courses and Certifications

Dave Gray

JWT Authentication - Node JS and Express Tutorials for Beginners

Implement JWT-based authentication for a Node.js and Express REST API with protected routes, refresh tokens, and secure cookies.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Laith Academy

JWT Authentication with Node Crash Course

Builds a Node and Express API that authenticates users with JSON Web Tokens, hashes passwords, and protects routes with middleware.

• YouTube
• 1 hour 29 minutes
• Self-Paced
• Free Video

Caleb Curry

Introduction to Authentication - User and API Authentication

Discover the fundamentals of user and API authentication, covering tokens, JWTs, API keys, and how authentication differs from authorization in modern applications.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Look Ma, No Keys! Signing JWTs with the Google Cloud API

Discover how to sign JWTs without managing sensitive keys by leveraging Google Cloud APIs for enhanced security and simplified workflows in applications like Google Wallet passes and microservices.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Cyber Mentor

Attacking JWT - Header Injection Techniques

Learn how JWT header handling can be exploited through algorithm injection and JWK header injection.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Okta

Security Tokens - Understanding JWTs, Macaroons, and PASETOs

Compare JWTs, Macaroons, and PASETOs to understand how security tokens work, where they fail, and when to use each.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Dave Gray

JWT Authentication - Persist Login State on Refresh - MERN Stack

Implement JWT access and refresh tokens in a React MERN app to reauthorize API requests and preserve login state after page refresh.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Hitesh Choudhary

Generating New Refresh Tokens in MERN Backend

Secure token refresh in MERN: Implement automatic access token renewal using refresh tokens, enhancing user authentication without frequent logins. Covers token generation, verification, and secure logout.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

All Things Open

How I Bought Booze with a JSON Web Token - Using Verifiable Credentials for Age Verification

Discover how JSON Web Tokens and Verifiable Credentials revolutionize age verification in delivery apps, enabling secure, privacy-focused digital proof of qualifications for online transactions.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

DefCamp

Exploiting Token Based Authentication - Attacking and Defending Identities in the 2020s

Dive into modern token-based authentication vulnerabilities and defense strategies, exploring real-world attack scenarios and essential security measures for protecting digital identities.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Handling JWTs: Understanding Common Pitfalls

Explore JWT authentication, common pitfalls, and security best practices. Learn about JWT structure, verification, and protection against attacks like algorithm confusion and secret brute-forcing.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

LASCON

JWTs - Patterns and Anti-patterns in Authentication

Examine JWT use cases and anti-patterns, including session design, revocation, token expiration, signing-key rotation, service-to-service authentication, and alternatives.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Attacking and Defending JWT Tokens - The Ultimate Guide

Explores how weak JWT verification enables real-world authentication bypass and account takeover, then outlines ways developers can test and strengthen token security.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

DevSecCon

Public Key Caching Strategies for Token Signature Validation - DevSecCon

Explore public key caching strategies for token signature validation in OAuth2 and OpenID Connect. Compare performance and security trade-offs of different approaches for relying parties.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

ISTA Conference

The Power of JWT and Cryptography - Fundamentals and Digital Signatures

Explore fundamental cryptography principles, JWT, and digital signatures for software security. Learn how to protect infrastructure and data from attacks.

• YouTube
• 18 minutes
• Self-Paced
• Free Video