July 2018
Intermediate to advanced
268 pages
7h 36m
English
"JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties."
In the past, the stateless nature of HTTP was circumvented in a web application (most of them are stateful in nature) by associating each request with a session ID created on the server and then stored by the client using cookies. Each request sends the cookie (session ID) in the form of an HTTP header, which gets validated by the server, and a state (a user session) is associated with each request. In modern applications (we will cover this in a bit more detail in the next section), a server-side session ID is replaced with the JWT. The following diagram shows the workings of the JWT: ...
Read now
Unlock full access