DEV Community

#jwt

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I built JWT auth with refresh token rotation. I'd still choose sessions.

I built JWT auth with refresh token rotation. I'd still choose sessions.

13 min read
JWT access tokens need explicit issuer, algorithm, and audience checks

JWT access tokens need explicit issuer, algorithm, and audience checks

3 min read
Building Secure Authentication APIs with Django REST Framework and JWT

Building Secure Authentication APIs with Django REST Framework and JWT

2 min read
How to decode a JWT in the browser

How to decode a JWT in the browser

2 min read
How to Decode and Verify a JWT in Your Browser (Without Pasting It Into a Server)

How to Decode and Verify a JWT in Your Browser (Without Pasting It Into a Server)

4 min read
Rotating signing keys without breaking live tokens

Rotating signing keys without breaking live tokens

11 min read
Validating OAuth Metadata and JWTs

Validating OAuth Metadata and JWTs

3 min read
Verifying a JWT in the browser with Web Crypto: four things that bite

Verifying a JWT in the browser with Web Crypto: four things that bite

4 min read
Stop Storing JWTs in localStorage. Here's Why.

Stop Storing JWTs in localStorage. Here's Why.

7
3 min read
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

1
4 min read
The fast-jwt fix for algorithm confusion missed the prefix

The fast-jwt fix for algorithm confusion missed the prefix

5 min read
Understanding JWT Authentication Without the Hype

Understanding JWT Authentication Without the Hype

1 min read
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token

The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token

9 min read
You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)

You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)

3 min read
JWT ou sessão? Como cada um funciona e quando usar qual

JWT ou sessão? Como cada um funciona e quando usar qual

11 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.