Skip to main content

Posts

Showing posts from February, 2020

Decoding Json Web Tokens (JWTs) | Purpose, Solution and application

Well, I have used a bunch of user authentication and authorization web applications in my tenure on the Internet. And its the time, while working on one of the related projects, I was introduced to this amazing term "JWT". And this is how my journey of exploration began! What is JSON Web Token(JWT)? As defined on the official website, on an abstract level,  JWT  is a standard that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. 😐 If you got it, skip the blog! If you are still reading, buckle up the belts, time to dissect it further! Let's understand why do we need it in the first place! HTTP as per the design is a stateless protocol. This means the server while serving a request does not know anything about the previous request. Thus, for applications which majorly relies on user authentication and authorization suffers a big problem. Pre-context | Authorization vs Authentication