geto

|| positive vibes only 🌸 • memes • tech ||

[Mohammed Tawakkal Ahmed @Tawakkalah13_10]

JWT

JSON Web Token (jwt) is a secure way to send information btw a client and server. it is used in web applications and APIs to verify users and prevent unauthorized accesses when jwt generates tokens its structure is Header ,Payload and signature

this is how jwt token works
login request the user logs in through the client application by sending their credentials (username & password) to the server.Server Generates JWT If the credentials are correct the server generates a JWT token using a secret key.if the jwt token gets expired token it will returns 401 unauthorized . Then Returns JWT The server sends the JWT back to the client application.
Further Requests with JWT For any subsequent requests, the client sends the JWT along with the request. The server verifies the JWT before granting access to protected resources.

Security considerations
use https prevent man in the middle attacks by transmitting JWTs over https . set expiration time prevent long-lived tokens that can be exploited.
and use secure storage to store jwt securely for example Http only cookies instead of local storage

Common issues with JWT
jwt Rejects the token if the token has expired, the signature is invalid, or the claims do not match the expected details.token does not support required scope the token does not include the permissions needed for the action.JWT

Jwt is a secure way to send information btw a client and server. it is used in web applications and APIs to verify users and prevent unauthorized accesses
when jwt generates tokens its structure is Header ,
Payload and signature

this is how jwt token works
login request the user logs in through the client application by sending their credentials (username & password) to the server.Server Generates JWT If the credentials are correct the server generates a JWT token using a secret key.if the jwt token gets expired token it will returns 401 unauthorized . Then Returns JWT The server sends the JWT back to the client application.
Further Requests with JWT For any subsequent requests, the client sends the JWT along with the request. The server verifies the JWT before granting access to protected resources.

Security considerations
use https prevent man in the middle attacks by transmitting JWTs over https . set expiration time prevent long-lived tokens that can be exploited.
and use secure storage to store jwt securely for example Http only cookies instead of local storage

Common issues with JWT
jwt Rejects the token if the token has expired, the signature is invalid, or the claims do not match the expected details.token does not support required scope the token does not include the permissions needed for the action.

Jwt is not Encrypted
Like JWT is encoded, not encrypted
And anyone can decode payload base64
jwt is stateless servers does NOT store session data

Basic question
What is a common issue present in it ?

[geto @getoB76607]

@v1239root Less gooo👀

[geto @getoB76607]

@elonmusk 😈😈

[JAPAN 🇯🇵 @japanvistamedia]

Tokyo, Japan.

[V11d @v1239root]

20 feb logs

- understanding owasp top 10

- I'll be start focusing onbug bounty bcz I 've been exploring web app security for almost a month now.

- 26% done on my pre-security path on TryHackMe.

[Elon Musk @elonmusk]

Understand the Universe

[geto @getoB76607]

@anime_ Best scene of the anime ngl

[Earth @earthcurated]

alone can be beautiful…

[Abdulkadir | Cybersecurity @cyber_razz]

Due to Linux case sensitivity, I create different directories with same names

eg : Downloads, DownloadS,DOwnloads,downloads,doWnloads, dowNloads etc

[Anime Crave @Anime_Crave]

Nazuna 🩷

[geto @getoB76607]

@elonmusk 🫡🫡🫡🫡

[geto @getoB76607]

@v1239root ltfggg , good morning

[geto @getoB76607]

@v1239root Less go, good morning

[geto @getoB76607]

@Ishansharma7390 ✨💫✨

[geto @getoB76607]

@v1239root Good morning makima ☺️

[ALIEN STAGE_official @Official_ALNST]

MirroR
(ALNST Sub : MIZI Pt.2)

YouTube:https://t.co/pWKtKIiTLI
YouTube Music:https://t.co/DPBaAdXYqN
Melon:https://t.co/2wZnK00PnH
Vibe:https://t.co/y4Q3H68gnO
Genie:https://t.co/jGP56HZXAg
Spotify:https://t.co/YkQNBGvR6V
Apple Music:https://t.co/O0V4SNKGYC

#ALNST #에이스테

[Anime Aesthetics @anime_]

❤️

[Elon Musk @elonmusk]

Starlink is not allowed to have an Internet provider license in South Africa for the sole reason that I am not Black.

This is not ok.