Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jwt hw #1

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Jwt hw #1

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0f97416
updated readme hw on JWT
chaninator Apr 4, 2017
14d9da8
updated readme
chaninator Apr 4, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,5 +3,21 @@
To help prepare for API authentication tomorrow, research [JSON Web Tokens](https://jwt.io) (known as JWTs). This should take about 30 minutes. Answer the following questions and submit this README as your homework:

1. What are the 3 parts of a JWT?
a. Header
b. Payload
c. Signature
2. What information does each part contain?
a. Header - contains two parts consisting of the type of token and the hashtag algorithm being used
{
"alg": "HS256",
"typ": "JWT"
}
b. Payload - contains the claims which can be reserved, public, or private.
{
"sub": "1234567890",
"name": "John Doe",
"admin": true
}
c. Signature - You need to take the header and payload and sign these. It is used to verify that the sender of JWT is who they say they are.
3. Why do people use JWTs for authentication? A great resource to read would be https://jwt.io/introduction/.
JWT's are way less verbose than XML. The size is also smaller in SAML which make it extremely useful in HTTP environments. It can also use a public/private pairing key. JWT is also used at a Internet scale.