Everything about JSON Web Token

🧭 Start here: a 6-step reading path

1. Read the overview: JSON Web TokenA 5-minute orientation
2. Skim a recent paper: Implementation of JSON Web Token on Authentication with HMAC SHA-256 AlgorithmInfluential work since 2022
3. Pick up a classic book: The web application hacker's handbookThe most-reprinted book on the subject
4. Read the landmark paper: Performance comparison of signed algorithms on JSON Web TokenCited 21 times
5. Go sideways: JSON Web SignatureA closely related topic
6. Go sideways: Digest access authenticationA closely related topic

🏆 Landmark papers (most cited)

• Performance comparison of signed algorithms on JSON Web Token

  A Rahmatulloh, R Gunawan, F M S Nursuwars · 2019 · IOP Conference Series: Materials Science and Engineering · 21 citations

• An analysis on the revoking mechanisms for JSON Web Tokens

  László Viktor Jánoky, János Levendovszky, Péter Ekler · 2018 · International Journal of Distributed Sensor Networks · 19 citations

• Keamanan RESTful Web Service Menggunakan JSON Web Token (JWT) HMAC SHA-512

  Alam Rahmatulloh, Heni Sulastri, Rizal Nugroho · 2018 · Jurnal Nasional Teknik Elektro dan Teknologi Informasi (JNTETI) · 10 citations

• Stateless Authentication with JSON Web Tokens using RSA-512 Algorithm

  Aldy Putra Aldya, Alam Rahmatulloh, Muhammad Nur Arifin · 2019 · JURNAL INFOTEL · 10 citations

• Model for Storing Tokens in Local Storage (Cookies) Using JSON Web Token (JWT) with HMAC (Hash-based Message Authentication Code) in E-Learning Systems

  Syabdan Dalimunthe, Joeharsyah Reza, Asep Marzuki · 2022 · Journal of Applied Engineering and Technological Science (JAETS) · 10 citations

• Insights of JSON Web Token

  School of Computer Engineering and Technology, MIT World Peace University, Pune, Maharashtra, India., Pooja Mahindrakar*, Dr. Uma Pujeri · 2020 · International Journal of Recent Technology and Engineering (IJRTE) · 9 citations

• Restful API Security Using JSON Web Token (JWT) With HMAC-Sha512 Algorithm in Session Management

  Syabdan Dalimunthe, Emansa Hasri Putra, Muhammad Arif Fadhly Ridha · 2023 · IT Journal Research and Development · 9 citations

• Enhancing Data Security: A Comprehensive Study on the Efficacy of JSON Web Token (JWT) and HMAC SHA-256 Algorithm for Web Application Security

  Et al. Manish Rana · 2023 · International Journal on Recent and Innovation Trends in Computing and Communication · 8 citations

🆕 Influential since 2022

• Implementation of JSON Web Token on Authentication with HMAC SHA-256 Algorithm

  Ficry Cahya Ramdani, Alam Rahmatulloh, S.T., M.T., MCE. (SCOPUS ID=57210469316), Rahmi Nur Shofa · 2023 · SISTEMASI · 2 citations

• Biometric JSON Web Tokens (BJWT): Enhancing Web API Security with Biometric Key Exchange and OTP-JWT Authentication

  Mohamed Amer, Mohamed Amer, Tarek S. Sobh · 2024 · International Journal of Computer Applications · 2 citations

• Implementasi Rest API Web Service Dengan Otentifikasi JSON Web Token Untuk Aplikasi Properti

  Yohannes Loui Pattinama, FERDIANSYAH, Ika Susanti · 2023 · Informatik : Jurnal Ilmu Komputer · 1 citations

• SHA-512 Algorithm on Json Web Token for Restful Web Service-Based Authentication

  Naufal Rasyada · 2022 · Journal of Applied Data Sciences · 1 citations

• Optimasi Keamanan dalam Pengembangan Aplikasi Menggunakan Metode Agile Scrum dan JSON Web Token

  Huda Prasetyo, Ucu Nugraha · 2023 · JUSTINFO | Jurnal Sistem Informasi dan Teknologi Informasi · 1 citations

📚 Books worth reading

• The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
• Apache Solr Beginner's GuideAlfredo Serafini · 2013
• 📕JSON Web TokenGerardus Blokdyk · 2018
• 📕ASP.NET Core 2.2 MVC, Razor Pages, API, JSON Web Tokens & HttpClientJonas Fagerberg · 2019

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

• JSON Web Signature A JSON Web Signature (abbreviated JWS) is an IETF-proposed standard (RFC 7515) for signing arbitrary data. This is used as the basis for a variety of web-based…
• Digest access authentication Digest access authentication is one of the agreed-upon methods a web server can use to negotiate credentials, such as username or password, with a user's…
• Salted Challenge Response Authentication Mechanism In cryptography, the Salted Challenge Response Authentication Mechanism (SCRAM) is a family of modern, password-based challenge–response authentication…
• Web API security Web API security entails authenticating programs or users who are invoking a web API. Along with the ease of API integrations come the difficulties of…
• Personal access token In computing, a personal access token (or PAT) is a string of characters that can be used to authenticate a user when accessing a computer system instead…
• JSON Web Encryption JSON Web Encryption (JWE) is an IETF standard providing a standardized syntax for the exchange of encrypted data, based on JSON and Base64. It is defined…
• HMAC-based one-time password HMAC-based one-time password (HOTP) is a cryptographic algorithm based on a one-time password (OTP) and hash-based message authentication code (HMAC).…
• Time-based one-time password Time-based one-time password (TOTP) is a computer algorithm that generates a one-time password (OTP) using the current time as a source of uniqueness.…