Skip to content

twobotechnologies

tag: jwt

JWT

JSON Web Tokens (RFC 7519): structure, claims, signatures, and the mistakes that turn them into vulnerabilities.

Articles

Authorization
Implementing Modern OAuth Techniques: PAR, DPoP and More
The OAuth 2.0 extensions worth adopting now: PKCE everywhere, pushed authorization requests, DPoP, issuer identification, resource indicators and token exchange.
/blog/2011/10/implementing-new-oauth-techniq.html

Guides

Topic guide
OAuth security: what to get right
A practical OAuth 2.0 security guide based on RFC 9700: choose the right flow, use PKCE and state, validate redirects, limit tokens, protect refresh tokens and APIs.

All tags and archives · Glossary