Programster's Blog

Tutorials focusing on Linux, programming, and open-source

Lecture - 100 Percent Stateless with JWT

JWT

Below is a video from Hubert Sablonnière discussing JSON Web Tokens (JWT). This video came out in 2016, and I still find it to be the best video to learn about for people who want to learn about JWTs, from any experience level.

I couldn't stand the low framerate of the original video on Youtube, so I converted it to 60fps, but feel free to go watch the original.

Timestamps

Introduction (00:00)
HTTP-Cookies (5:08)
Session-IDs to add more trust to cookies (06:49)
Problems with Session-IDs when having multiple servers in parallel (09:20)
JSON Web Tokens (15:29)
'Cookies' vs 'Session ID' vs 'JWTs' (15:53)
Two kind of tokens (16:43)
Authentication and Authorization with a JWT as Cockie (17:45)
Structure of JWTs (19:20)
Benefits of JWTs (26:13)
Signatures (28:29)
OAuth2 and OpenID Connect (29:49)
Drawbacks of JWTs (31:26)

Last updated: 13th June 2024
First published: 25th April 2022

This blog is created by Stuart Page

I'm a freelance web developer and technology consultant based in Surrey, UK, with over 10 years experience in web development, DevOps, Linux Administration, and IT solutions.

Need support with your infrastructure or web services?

Get in touch