Webapp - Tag - Lewis Watsonhttp://lnwatson.co.uk/tags/webapp/Webapp - Tag - Lewis WatsonHugo -- gohugo.ioenThu, 20 Jun 2024 00:00:00 +0000Understanding JSON Web Tokens and How *Not* to Implement Themhttp://lnwatson.co.uk/posts/jwt-forging/Thu, 20 Jun 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/jwt-forging/Understanding JSON Web Tokens and How Not to Implement Them Video Walkthrough Trying something new with this, I also have a video of me solving the challenge. Maybe some folks will find it useful to watch. Introduction JSON Web Tokens (JWTs) are a popular method for handling authentication in web applications. They’re compact, self-contained, and can securely transmit information between parties. However, like any security mechanism, they’re only as strong as their implementation.