crio-bytes / security Goto Github PK

Entity: @rishitha24

Contributions:

• code
• content
• ideas
• doc

Entity: @Ak-Shaw

Contributions:

• code
• doc
• eventOrganizing
• ideas
• maintenance
• review

MicroByte Title:: Understanding JWT

Domain:

• Security
• Auth

Scope of learning for learners:

• Understand working and importance of JWT
• Learn to parse a JWT on their own

Activities:

• Parse JWT to get the message,
• Try Modifying JWT to show that tampering voids the JWT
• Create own JWT with a custom message

MicroByte Title: Secure Authorization with JWT

Improvement Proposal:

• Create a function to verify JWT without any external packages. Present code uses an npm package

Benefits of proposed improvements:

• Learners would learn how the underlying mechanism of JWT verification works