JWT using RSA Public/Private Key Pairs

Поділитися
Вставка

КОМЕНТАРІ • 33

  • @satan-zg4uc
    @satan-zg4uc 3 роки тому +3

    Thank you so much for sharing your knowledge, man of science.

  • @erlisuo2160
    @erlisuo2160 4 роки тому +6

    Been looking for a tutorial on this for a while, thanks!!

  • @Vinod_Kumar827
    @Vinod_Kumar827 Рік тому +1

    This was an awesome video

  • @SpencerDavis2000
    @SpencerDavis2000 4 роки тому +3

    super amazing clear tutorial. works great. thanks

  • @ZadayEspuma
    @ZadayEspuma 2 місяці тому

    Thanks for the analysis! I need some advice: My OKX wallet holds some USDT, and I have the seed phrase. (behave today finger ski upon boy assault summer exhaust beauty stereo over). What's the best way to send them to Binance?

  • @ChelseaChamplain
    @ChelseaChamplain Місяць тому

    Thanks for the analysis! 🔍 I wanted to ask something unrelated: 🤔 I have a set of words 🤷‍♂️. (behave today finger ski upon boy assault summer exhaust beauty stereo over). How do I use this? 🤨

  • @mohammedramadan3480
    @mohammedramadan3480 3 роки тому +1

    Thank you sir 🙂

  • @ahmedb.hameed3330
    @ahmedb.hameed3330 7 років тому +4

    You save my day. thanks a lot

  • @alexvalchuk3452
    @alexvalchuk3452 3 роки тому +1

    Thanks!

  • @SogMosee
    @SogMosee 6 років тому +3

    I am confused how this would implemented on a react form frontend and an express server backend with mongodb database.

    • @moatassimkhelouati5759
      @moatassimkhelouati5759 6 років тому

      u just need to configure web-pack for MERN stack

    • @StuartWilliamsCloud
      @StuartWilliamsCloud  6 років тому +1

      Sounds like a good topic for a Video. Thanks!

    • @debdutsaha4316
      @debdutsaha4316 5 років тому +1

      You can use axios and then set authorization header with the signed token and
      then in express receive the req in server endpoint and then
      var string=req.headers.authorization
      var decoded=jwt.verify(string,privatekey,signoptions)
      decoded is the desired value

  • @micalevisk
    @micalevisk 4 роки тому +4

    you mean JSON Web Tokens

  • @leeyahav4754
    @leeyahav4754 4 роки тому +1

    thnx a lot
    well explained

  • @fercho9267
    @fercho9267 4 роки тому +1

    thanks for the video, where would you save the .pem files in production?

    • @StuartWilliamsCloud
      @StuartWilliamsCloud  4 роки тому +2

      I would save them in a key vault like Hasicorp, Azure Vault, etc.

    • @fercho9267
      @fercho9267 4 роки тому

      @@StuartWilliamsCloud thanks

  • @martinaandersson8352
    @martinaandersson8352 3 роки тому

    I don't understand..... won't the private and public key be the same for every user if you load them from files? I mean, how do you generate a new private and public key for each user on the machine?

    • @putinscat1208
      @putinscat1208 3 роки тому +1

      Yes. The idea is to create a token with private key, and then verify the token with public key. The contents of the token are readable by anyone on the internet. But the signature guarantees the contents were not manipulated. The claims in the token determine who/what can get access. You should never put anything secret in the claims.

  • @putinscat1208
    @putinscat1208 3 роки тому

    I might be wrong, but openssl should be able to generate keys.

    • @StuartWilliamsCloud
      @StuartWilliamsCloud  2 роки тому

      Should, never figured out what combination of args does it, if you figure it out post it.

  • @manjunaika1993
    @manjunaika1993 3 роки тому

    can u make a video or share link of implementing same jwt(RSA256) using Web API .net core 2.0

    • @StuartWilliamsCloud
      @StuartWilliamsCloud  3 роки тому

      .NET Core 2.x is deprecated. Please switch to Core 3.1.x LTS for success.

  • @luanrodrigues4645
    @luanrodrigues4645 4 роки тому +5

    Great job, 3 yrs old video and still very helpful!
    And the github link for people want to see the code: github.com/BlitzkriegSoftware/NodeJwtRsa

  • @squidward7091
    @squidward7091 5 років тому +1

    How do I distribute my public key to third party application? Using HTTP? FTP?

    • @squidward7091
      @squidward7091 5 років тому +1

      Ubuntu package use HTTP to distribute their public key.

  • @sunilk9760
    @sunilk9760 6 років тому +1

    jwt= json web token or java web token ?