When it comes to security, certificates are used everywhere since the early days of the web. While...
When it comes to security, certificates are used everywhere since the early days of the web.
While storing them in PEM/DER format has always been complicated, things have become much easier with the modern JWKS (J for JSON) format.
And you're probably already using JWKS without knowing it, every time you validate a JWT from Google, GitHub, or your identity provider.
1) A word about cryptography
We can use symmetric cryptography based on a secret.
We've established that Base64 isn't encryption and that you can't un-hash a password. JWTs are where...
Learn how to decode JWT tokens client-side. Understand header, payload, signature, and how to inspect tokens safely without…
If you've ever worked with auth, you've seen a JWT — a long string like eyJhbGci... split into three...
A JWT isn't just JSON you can inspect. It's a live bearer token. Here's a safer way to decode...
As developers, we use online tools every day. JSON formatters JWT decoders Base64 encoders Hash...
Everything developers need to know about Base64 — how it works, where it's actually used in production (JWT, Kubernetes, HTTP…
