/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 pentesterlab.com
Algorithm Confusion Attacks against JWT using ECDSA
| | words.filippo.io
Why We Don't Generate Elliptic Curves Every Day
3.8 parsecs away

Travel
| | Elliptic curves are standardized, instead of being generated like Diffie-Hellman parameters. There's good reasons!
| | www.sjoerdlangkemper.nl
Attacking JWT authentication
3.6 parsecs away

Travel
| | JSON Web Tokens or JWTs are used by some web applications instead of traditional session cookies. Because of their statelessness and the signature implementation there are some security issues that are specific to JWTs. This post describes some ways you can verify that a JWT implementation is secure.
| | mazinahmed.net
Practical Approaches for Testing and Breaking JWT Authentication | Mazin Ahmed
4.3 parsecs away

Travel
| | Application and Infrastructure Security Engineering
| | weblog.west-wind.com
Role based JWT Tokens in ASP.NET Core APIs - Rick Strahl's Web Log
17.0 parsecs away

Travel
| ASP.NET Core Authentication and Authorization continues to be the most filddly part of the ASP.NET Core eco system and today I ran into a problem to properly configure JWT Tokens with Roles. As I had a hard time finding the information I needed in one place and instead ended up with some outdated information, I'm writing up a post to hopefully put all the basic bits into this single post.