Live briefing

Everything about JSON Web Token

Proposed web cryptography standard

JSON Web Token is a proposed Internet standard for creating data with optional signature and/or optional encryption whose payload holds JSON that asserts some number of claims. The tokens are signed either using a private secret or a public/private key. Wikipedia →

🧭 Start here: a 6-step reading path

Read the overview: JSON Web TokenA 5-minute orientation
Pick up a classic book: The web application hacker's handbookThe most-reprinted book on the subject
Go sideways: JSON Web SignatureA closely related topic
Go sideways: Digest access authenticationA closely related topic

📖 Definitions

No dictionary entry for this exact phrase.

🗂️ The subject at a glance

🏆 Landmark papers (most cited)

No matching papers found.

📚 Books worth reading

The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Automate the Boring Stuff with PythonAl Sweigart · 2015
RESTful Java with JAXRS 20Bill Burke · 2013
📕Microsoft Dynamics CRM 2013 unleashedMarc J. Wolenik · 2014

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

JSON Web Signature A JSON Web Signature (abbreviated JWS) is an IETF-proposed standard (RFC 7515) for signing arbitrary data. This is used as the basis for a variety of web-based…
Digest access authentication Digest access authentication is one of the agreed-upon methods a web server can use to negotiate credentials, such as username or password, with a user's…
Salted Challenge Response Authentication Mechanism In cryptography, the Salted Challenge Response Authentication Mechanism (SCRAM) is a family of modern, password-based challenge–response authentication…
Web API security Web API security entails authenticating programs or users who are invoking a web API. Along with the ease of API integrations come the difficulties of…
Personal access token In computing, a personal access token (or PAT) is a string of characters that can be used to authenticate a user when accessing a computer system instead…
JSON Web Encryption JSON Web Encryption (JWE) is an IETF standard providing a standardized syntax for the exchange of encrypted data, based on JSON and Base64. It is defined…
HMAC-based one-time password HMAC-based one-time password (HOTP) is a cryptographic algorithm based on a one-time password (OTP) and hash-based message authentication code (HMAC).…
Time-based one-time password Time-based one-time password (TOTP) is a computer algorithm that generates a one-time password (OTP) using the current time as a source of uniqueness.…