Payara Micro Revealed: Cloud-Native Application Development with Java

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022

D. R. HeffelfingerPayara Micro Revealedhttps://doi.org/10.1007/978-1-4842-8161-1_11

11. Security with JSON Web Tokens

David R. Heffelfinger¹  

(1)

Fairfax, VA, USA

 

Traditionally, security in web applications has been implemented by keeping data about the logged-in user in the HTTP session. With microservices being inherently stateless, this approach is not suitable for a microservices architecture. To address security, MicroProfile has support for JSON Web Token (JWT).

JSON Web Tokens are a mechanism used to implement stateless security in microservices.

JWT is a JSON-based text format used for exchanging information between systems. JWT is an open standard, ...