/explore
|
You are here 
|
openapi.com | ||
| | | | |
stevekrouse.com
|
|
| | | | | ||
| | | | |
philodev.one
oAuth is a hard to get into because of its (necessary) complexity. A basic understanding of the standard flow and the actors involved can help to make better decisions and understand the security implications of the choices. |
|
| | | | | ||
| | | | |
www.sjoerdlangkemper.nl
JSON Web Tokens or JWTs are used by some web applications instead of traditional session cookies. Because of their statelessness and the signature implementation there are some security issues that are specific to JWTs. This post describes some ways you can verify that a JWT implementation is secure. |
|
| | | | | ||
| | | | |
www.adamalbrecht.com
UPDATE: There have been some changes in the JWT Gem that make some of the below not work exactly right (it'll still be about 90% the same). Specifically, they added expiration support. See my post on the same topic, but using React.js. The server side code in this post will work just as well with Angular. |
|
| | | |||
