JWT-Security

JWT Security Best Practice notes and examples.

This is a collection of Best Practices and notes gathered from across the Internet. Along with some examples. Please check the sources, when applicable for additional reading/viewing. This is intended to be a collection of my own knowledge, experience, and new things I've learned while implementing different OAuth2 & OIDC services.

1. What is a JWT?
2. How should I use JWTs?
3. Best Practices
4. Additional Learning
5. JWT Attack Playbook
6. BONUS: OAuth