Using JSON Web Tokens as API Keys

0 stars0 forks0 contributors

Overview

Compared to API keys, JWTs offers granular security, homogeneous auth architecture, decentralized issuance, OAuth2 compliance, debuggability, expiration control, device management

Related Projects

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

Last commit

Created

Links & Resources

Website

Included in

IAM2.2k

Learn how to use JWT for Authentication

:closed_lock_with_key: Learn how to use JSON Web Token (JWT) to secure your next Web App! (Tutorial/Example with Tests!!)

Stars4,178

Forks245

Last commit3 months ago

Adding JSON Web Token API Keys to a DenyList

On token invalidation

Stars0

Forks0

Last commit

Stop using JWT for sessions

And why your "solution" doesn't work, because stateless JWT tokens cannot be invalidated or updated. They will introduce either size issues or security issues depending on where you store them. Stateful JWT tokens are functionally the same as session cookies, but without the battle-tested and well-reviewed implementations or client support

Stars0

Forks0

Last commit

JOSE is a Bad Standard That Everyone Should Avoid

The standards are either completely broken or complex minefields hard to navigate

Stars0

Forks0

Last commit