Reverse-Engineering Belgium: De Lijn

#1

Post by Allstar » Mon, Jul 20, 2015, 3:42 PM UTC

Reverse-Engineering Belgium: De Lijn
demey.io

Re: Reverse-Engineering Belgium: De Lijn

#2

Post by chmike » Mon, Jul 20, 2015, 6:56 PM UTC

Where could I find a clear explanation of JWT use ? I found this document (http://self-issued.info/docs/draft-ietf-oauth-json-web-token...) that describes the JWT encoding. But it doesn't discribe how it is supposed to be used. Where it is stored, how it authenticates a user, etc.

What makes it better than a cookie session ID ? I don't get it.

Re: Reverse-Engineering Belgium: De Lijn

#3

Post by Allstar » Mon, Jul 20, 2015, 7:39 PM UTC

chmike wrote: post #2

Where could I find a clear explanation of JWT use ? I found this document ( http://self-issued.info/docs/draft-ietf-oauth-json-web-token... ) that describes the JWT encoding. But it doesn't discribe how it is supposed to be used. Where it is stored, how it authenticates a user, etc. What makes it better than a cookie session ID ? I don't get it.

Auth0 has a nice article about the differences here: https://auth0.com/blog/2014/01/07/angularjs-authentication-w...

And you can play around with it using their interactive tool: http://jwt.io