Discover and read the best of Twitter Threads about #authorization
Most recents (4)
Let’s get our series started in which we make our case against token-based AuthZ.
JWTs are like a key and composed of three parts: a header, a payload, and a signature.
JWTs are like a key and composed of three parts: a header, a payload, and a signature.
The payload contains information to identify the owner of the token: user ID, email address, etc.
These are called claims and essentially, they can hold whatever info you may need.
These are called claims and essentially, they can hold whatever info you may need.
The signature is what makes a JWT secure, but JWTs are usually not encrypted.
The information is encoded (not encrypted), which means it can be decoded.
The way to keep JWTs secure is to make sure they are hashed using a secret.
The information is encoded (not encrypted), which means it can be decoded.
The way to keep JWTs secure is to make sure they are hashed using a secret.
Daily Bookmarks to GAVNet 11/14/2021 greeneracresvaluenetwork.wordpress.com/2021/11/14/dai…
This mineral shouldn’t exist on Earth’s surface. But researchers found it inside a diamond.
usatoday.com/story/news/nat…
#diamonds #minerals #discovery #botswana #davemaoite
usatoday.com/story/news/nat…
#diamonds #minerals #discovery #botswana #davemaoite
Ground-Penetrating Radar Reveals Entire Ancient Roman City
gizmodo.com/ground-penetra…
#archaeology #GroundPenetratingRadar #mapping #DataAnalysis #ResearchResults
gizmodo.com/ground-penetra…
#archaeology #GroundPenetratingRadar #mapping #DataAnalysis #ResearchResults
.@dschenkelman's chat with @juanrossi, a Senior Platform Security Manager at @Mercadolibre. Join us to know more about their Authorization challenges and how they tackled them.
Join here twitter.com/i/spaces/1yNGa…
Join here twitter.com/i/spaces/1yNGa…
#Authorization and #Authentication are too critical to have everyone learning and implementing them from scratch. With more tens of thousands of employees, @Mercadolibre needed to create a solution that is easy to use and can be implemented in any language and tech stack
@patoarchitekci @marekgrabarz @rwitkowski_asc No więc tak, przesłuchałem w drodze do ... Panie Władzo, to naprawdę moja krytyczna życiowa potrzeba ... tyle powiem w temacie wyjścia. To teraz o odcinku.
1/n
1/n
@patoarchitekci @marekgrabarz @rwitkowski_asc @marekgrabarz temat zna tak i to z praktyki, że aż mi trochę głupio że co nie powiem wyjdzie na hejt :), ale mam nadzieje że raczej będzie konstruktywnie i rzeczowo.
2/n
2/n
@patoarchitekci @marekgrabarz @rwitkowski_asc Główna rzecz (to samo było na #AzuredayPL - to do czego mam zastrzeżenie to przekazywanie że #OpenIDCOnnect to jest część #Oauth - tak nie jest. Ogólnie temat odcinka nie powinien brzemieć #OAUth i nie o to powinny być pytania.
3/n
3/n
