What Is JWT and Why Should You Use JWT

1,154,506
0
Published 2019-07-27
JSON Web Tokens (JWT) are talked about all the time, but what exactly are they and how do they work. In this video I will explain in depth exactly what JWT is, how it works, why it is secure, and when you should use it. We will go through multiple visual demonstrations of exactly how and why JWT works. We will also compare JWT to the more common and traditional session based user authorization. By the end of this video you will have a complete understanding of JWT, how it works, and when you should use it.


📚 Materials/References:

JWT Authentication Implementation Video:    • JWT Authentication Tutorial - Node.js  
JWT Playground: jwt.io/


🧠 Concepts Covered:

- What JWT is
- JWT vs Session
- The components of JWT
- How JWT is secure
- When you should use JWT
- The advantages of JWT


🌎 Find Me Here:

My Website: webdevsimplified.com/
Patreon: www.patreon.com/WebDevSimplified
Twitter: twitter.com/DevSimplified
Discord: discord.gg/7StTjnR
GitHub: github.com/WebDevSimplified
CodePen: codepen.io/WebDevSimplified


#JWT #WDS #JSONWebToken

All Comments (21)
  • @nsharma4981
    Man you're really a godsend, how is it humanly possible to pack so much info AND explain it all so lucidly in 15 mins?! I read so many articles but they all made the verify signature sound like magic and here you simplify it like it's no big deal. Now I finally understand why jwt is important. Thank you so so much Kyle! 😃
  • @gimmins
    I work in the software industry and needed to understand JWT. Your tutorial is by far one of the best I've seen. Clear, concise and super easy to understand. Uber thank you!
  • An articulate clear explanation of a very important security concept. Keep the videos coming Kyle.
  • @moy2010
    Another use case for JWT is the following: - The client signs the JWT with their own private key - The client shares its public key with you, and you keep a copy on the server - Everytime you decode the JWT, you verify its validity with the copy of the public key that you have on the server
  • this is one of the underrated explanations of jwt. as full stack engineer , I remember taking your react course 2 years ago where we were building a food application applying all the http verbs. now , I have been working for 7 months as full stack engineer here in seattle waghinston. if someone had told me , I will be a developer one day, I wouldn't have believed. thanks again
  • @tayfun6378
    I'm gonna say what everyone else said. this might be the clearest explanations ever!
  • @BlueHat1
    I'm really in awe of how easy to understand and clear you made this topic. What an incredible explanation! This is one of your best videos :)
  • @JamesJon1187
    Thanks this was not only super helpful in understanding jwts, but it also clarified how a session works!
  • @virajyadav8571
    Was struggling to understand the concept of JWT since over 2 weeks, I'm glad I watched this tutorial. Complete concept of JWT has been cleared in my mind now. Thanks a lot for making it so clean and simple to understand.
  • @riccoduro
    Excellent explanation of JWT, I was literally able to understand JWT in 15 minutes !
  • Your speaking is really easy to listen to for a non native speaker like me. Thank you so much.
  • @Texas6
    So much better than my professor's explanations. The visuals help a lot too. Thank you Kyle.
  • @IntrinDesign
    This is seriously the best explanation of JWT I have viewed. Thank you!
  • @haohu5540
    Thanks for the great explanation on JWT. For the session cookie based solution, I think the session doesn't have to be stored in memory. Storage like Redis with TTL is a great option. So when a user tries to swtich from Bank to Retirement service, the services can both retrieve the user session from the same Redis cluster
  • @moebob24
    Your videos are some of the cleanest, most well put together, informative, and easy to follow videos on YouTube. Thank you.
  • Any thing I get confused on, I check your page first. Your videos are really short and straight to the point with clear understanding. Thank you for putting out great content as always.
  • @glorat
    JWT in this tutorial is all about authentication, not authorization contrary to what was described, because its use here is identifying whether the user is the same user as the one that logged in (just like with sessions). Perhaps the confusion is that JWTs are commonly used for authorization by being created to grant access to APIs so that the API server knows the client is authorized to use the API. Neverthless, JWTs can be used for authentication (as in this tutorial) such as "ID tokens" and also for authorization such as "access tokens". A clear tutorial apart from this!
  • Nice one Kyle, you speak so clearly and sound highly knowledgeable about JWT. Really appreciate the effort you put into your videos. Awesome. Keep up the good work.
  • @BrandonSWie
    I've just started using JWT in my lastest Udemy course project and this video is just perfect for me to understand how it works.