DEV Community

#jwt

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How to Check If a JWT Is Expired (the exp Claim Explained)

How to Check If a JWT Is Expired (the exp Claim Explained)

Comments
3 min read
JWT access tokens need explicit issuer, algorithm, and audience checks

JWT access tokens need explicit issuer, algorithm, and audience checks

Comments
3 min read
Building Secure Authentication APIs with Django REST Framework and JWT

Building Secure Authentication APIs with Django REST Framework and JWT

Comments
2 min read
How to decode a JWT in the browser

How to decode a JWT in the browser

Comments
2 min read
How to Decode and Verify a JWT in Your Browser (Without Pasting It Into a Server)

How to Decode and Verify a JWT in Your Browser (Without Pasting It Into a Server)

Comments
4 min read
Rotating signing keys without breaking live tokens

Rotating signing keys without breaking live tokens

Comments
11 min read
I built JWT auth with refresh token rotation. I'd still choose sessions.

I built JWT auth with refresh token rotation. I'd still choose sessions.

Comments
14 min read
Validating OAuth Metadata and JWTs

Validating OAuth Metadata and JWTs

Comments
3 min read
Verifying a JWT in the browser with Web Crypto: four things that bite

Verifying a JWT in the browser with Web Crypto: four things that bite

Comments
4 min read
Stop Storing JWTs in localStorage. Here's Why.

Stop Storing JWTs in localStorage. Here's Why.

7
Comments
3 min read
Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

Comments 1
4 min read
The fast-jwt fix for algorithm confusion missed the prefix

The fast-jwt fix for algorithm confusion missed the prefix

Comments
5 min read
Understanding JWT Authentication Without the Hype

Understanding JWT Authentication Without the Hype

Comments
1 min read
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token

The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token

Comments
9 min read
You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)

You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.