News for hackers. Stuff that matters.
Re:Auth with JSON Web Tokens by brissmyr on Sunday January 19, 2014 @12:35PM (#7085082)
Worth mentioning is that JWT is used in the OpenID Connect standard, which is built on top of OAuth 2) for the authentication part. We use it in https://userbin.com to smoothly transfer user sessions between different platforms. Previously we used to roll our own (de-)serialization, signing, session expiration and encryption schemes, but JWT solves a lot of pain and makes it more obvious for developers to understand how this part of our authentication flow works, and are able to use the JWT libraries available in most programming languages.
Re:Auth with JSON Web Tokens by aduth on Sunday January 19, 2014 @01:12PM (#7085242)
Aside from the specifications, are there any resources you would recommend for implementing OpenID Connect? The results of a quick Google search are relatively sparse.