--- title: Best JWT posts of 2023 | daily.dev description: The most upvoted JWT posts of 2023, curated by the daily.dev community. canonical: https://daily.dev/tags/jwt/best-of/2023 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/jwt/best-of/2023 og:type: website og:site_name: daily.dev og:title: Best JWT posts of 2023 | daily.dev og:description: The most upvoted JWT posts of 2023, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of JWT — 2023 1. 1 [](/posts/sessions-tokens-jwt-sso-and-oauth-in-one-diagram-b69pkqdbb "Sessions, Tokens, JWT, SSO, and OAuth in One Diagram") Article ByteByteGo · 3y Sessions, Tokens, JWT, SSO, and OAuth in One Diagram The article explains the concepts of sessions, tokens, JWT, SSO, and OAuth in one diagram and discusses the impact of web session management on web applications. It also provides information on the most used Linux commands and outlines the aspects of cloud-native adoption. Additionally, it compares the event sourcing system design with the normal CRUD system design. 498 12 2. 2 [](/posts/auth-js-5ffbsnfpz "Auth.js") Article Community Picks · 3y Auth.js Use with any OAuth 2 or OpenID Connect provider - Built in email / passwordless / magic link. Use with any username / password store. 352 22 3. 3 [](/posts/ep69-explaining-json-web-token-jwt-to-a-10-year-old-kid-pi7nqpho5 "EP69: Explaining JSON Web Token (JWT) To a 10 Year Old Kid") Article ByteByteGo · 3y EP69: Explaining JSON Web Token (JWT) To a 10 Year Old Kid This week’s system design refresher: DevOps vs. SRE vs. Platform Engineering. Explaining JSON Web Token (JWT) to a 10-year-old Kid is a special box called a JWT. The header is like the label on the outside of the box. It tells us what type of box it is and how it's secured. 263 3 4. 4 [](/posts/password-session-cookie-token-jwt-sso-oauth---authentication-explained---part-1-713xf4khd "Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1") Article ByteByteGo · 4y Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1 Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1\. We discuss the problems each method solves and how to choose the right authentication method for our needs. The diagram below shows where these methods apply in a typical website architecture and their meanings. 227 6 5. 5 [](/posts/stop-using-json-web-tokens-for-user-sessions-jos3ghy3k "Stop using JSON Web tokens for user sessions") Article Hacker News · 3y Stop using JSON Web tokens for user sessions Using JSON Web tokens (JWTs) for user sessions without an effectively implemented logout mechanism can lead to security vulnerabilities. An XSS vulnerability can allow an attacker to access and exploit the JWT, gaining unauthorized access to the application. 142 5 6. 6 [](/posts/backend-api-middleware-database-jwt-ooc2gb4ba "Backend API, Middleware, Database, JWT") Article Community Picks · 3y Backend API, Middleware, Database, JWT Learn how to create a MERN stack application with authentication, using Express, MongoDB, Mongoose, React, Redux, React Router, and React Bootstrap. Implement authentication using JSON Web Tokens (JWT) and HTTP-only cookies. Includes backend API, middleware, database, and JWT. 86 7. 7 [](/posts/react-performing-authentication-with-jwt-ikqnlmfnk "React: Performing Authentication with JWT") Article asayer · 3y React: Performing Authentication with JWT This article will discuss how to perform JWT authentication in a React app. We will cover the steps involved in setting up a backend JWT endpoint, signing up and signing in from your React app, and protecting routes with JWT validation. You will use a custom-built Express server API to relay the JWT token for a user. 80 7 8. 8 [](/posts/how-to-manage-state-in-next-js-13-using-redux-toolkit--ni0uegecf "How to manage state in Next.js 13 using Redux Toolkit.") Article Hacker Noon · 3y How to manage state in Next.js 13 using Redux Toolkit. We will go through a real world example whereby, we need to store authentication data in redux state and in this case, it will be persisted. We will also access this data in the some of the components that need it. We will use Redux Toolkit to manage state in Next.js. 62 3 9. 9 [](/posts/4-common-mistakes-made-by-node-js-developers-zyvxhxlpt "4 Common Mistakes Made by Node.js Developers") Article Amplication · 4y 4 Common Mistakes Made by Node.js Developers The growth of Node.js is tremendous, it has a rich packages ecosystem, it’s battle-tested and the usage of JavaScript allows businesses to go full-stack and cut the development lifecycle short. 38 10. 10 [](/posts/top-3-security-best-practices-for-handling-jwts-l1piaqcj8 "Top 3 security best practices for handling JWTs") Article Snyk · 3y Top 3 security best practices for handling JWTs Ensure the security of your web applications by following the top 3 security best practices for handling JWTs. Keep JWTs secret, validate them properly, and set expiration times to prevent vulnerabilities and breaches. Use tools like Snyk to identify and remediate security issues related to JWTs. 35 11. 11 [](/posts/rust-project-create-an-authentication-server-fxzsskced "Rust Project – Create an Authentication Server") Article freeCodeCamp · 3y Rust Project – Create an Authentication Server Rust Project is designed to provide developers with the skills and knowledge they need to implement modern authentication solutions. The Rust programming language is often used for system-level programming, emphasizing safety, concurrency, and performance. The course offers a step-by-step guide to understanding and implementing user authentication in Rust. 35 12. 12 [](/posts/jwt-json-web-tokens-explanation-exploitation-0x02--19fchztfv "JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x02)") Article InfoSec Write-ups · 4y JWT \[JSON WEB TOKENS\] \[EXPLANATION & EXPLOITATION\] (0x02) This post explains the concept of JSON Web Tokens (JWT), specifically focusing on the explanation and exploitation of JWT header parameters such as JWK and JKU. It provides examples and discusses techniques for exploiting these parameters. 29 13. 13 [](/posts/go-fiber-vs-rust-performance-comparison-for-jwt-verify-and-mysql-query-mdikupvba "Go Fiber vs Rust: Performance comparison for JWT verify and MySQL query") Article Medium · 3y Go Fiber vs Rust: Performance comparison for JWT verify and MySQL query Go Fiber vs Rust: Performance comparison for JWT verify and MySQL query. Fiber, built on the foundation of fasthttp, shows promising potential for superior performance compared to Gin. In prior tests, Gin outperformed Rust for this particular use case. With Fiber, we anticipate even more impressive results. 25 1 14. 14 [](/posts/oauth-tools-the-online-tool-that-goes-beyond-jwts-u5bblf6ua "OAuth.Tools: The Online Tool That Goes beyond JWTs") Article The New Stack · 3y OAuth.Tools: The Online Tool That Goes beyond JWTs OAuth is a free online tool provided by Curity. It offers incredible features for anyone working with or interested in OAuth and OpenID Connect. You can decode or create JWTs with different characteristics, fetch tokens from a server, revoke tokens or add an access token to external API calls. 22 15. 15 [](/posts/creating-a-chatroom-in-angular-using-amplication-jtk2otxnl "Creating a Chatroom in Angular using Amplication") Article Amplication · 3y Creating a Chatroom in Angular using Amplication Amplication is a stunningly powerful web framework that combines design and development seamlessly. Amplication generates a backend server based on a data model defined by the developer. It also supports GraphQL and REST APIs, allowing developers to create flexible and modern applications. In this article, we will discuss how to create a chatroom in Angular using Amplication. 17 1 16. 16 [](/posts/using-json-web-encryption-jwe--tnssjqtdb "Using JSON Web Encryption (JWE)") Article DZone · 4y Using JSON Web Encryption (JWE) JSON Web Encryption (JWE) could be used when one needs to add sensitive information to a token that one would not want to share with other systems. In this case, the user can decode the token and get all the information from the payload. The full specification of JWE can be found in RFC7516. 16 1 17. 17 [](/posts/add-a-slack-chatbox-directly-into-your-react-app-8uxcdxa8v "Add a Slack Chatbox Directly into Your React App") Article Permit.io · 3y Add a Slack Chatbox Directly into Your React App Add a Slack Chatbox Directly into Your React App to your React App. Use React authorization and the Slack API to build a Slack-based chat box in your frontend app. Use FoAz, a feature in Permit.io that allows us to call backend APIs from the front end app. 14 2 18. 18 [](/posts/authentication-for-the-frontend-cloud-vercel-owjznyj1r "Authentication for the frontend cloud – Vercel") Article Community Picks · 3y Authentication for the frontend cloud – Vercel The frontend cloud is characterized by performance. It enables both faster application development and faster end-user interactions. At Clerk, we build authentication for the front end cloud. It's much easier to get started, and developers simply use as a foreign key throughout their database. 14 19. 19 [](/posts/jwt-json-web-tokens-explanation-exploitation-0x01--vifebg2qc "JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x01)") Article InfoSec Write-ups · 4y JWT \[JSON WEB TOKENS\] \[EXPLANATION & EXPLOITATION\] (0x01) Learn about JWT's, their structure, and how they can be exploited. Explore flawed signature verification and brute forcing the secret key. 14 1 20. 20 [](/posts/secure-go-apis-with-decentralized-identity-tokens-part-1-le1pppl4m "Secure Go APIs with Decentralized Identity Tokens, Part 1") Article The New Stack · 3y Secure Go APIs with Decentralized Identity Tokens, Part 1 The rise of decentralized identity tokens adds a new dimension to API security. Traditionally, API authentication and authorization relied heavily on centralized identity providers. Decentralized identity tokens allow individuals to have greater control over their identities and authenticate themselves without relying on central authority. 13 21. 21 [](/posts/create-secure-login-and-registration-with-jwt-best-security-practices-njwl6jltt "Create Secure Login and Registration with JWT & Best Security Practices") Article System Weakness · 3y Create Secure Login and Registration with JWT & Best Security Practices Learn how to create a secure login and registration system with JWT in Express.js and Node.js. Install the necessary packages and implement best security practices to prevent cyber attacks. 12 22. 22 [](/posts/laravel-authentication-and-authorization-jwt-and-policies-ldqthdcuz "Laravel Authentication and Authorization: JWT and Policies") Article AWS Tip · 3y Laravel Authentication and Authorization: JWT and Policies Laravel Authentication and Authorization: JWT and Policies are PHP classes that implements access control and hence authorization by defining authorization logic for a given model or resource. Every content that may be served by an API may be considered as a resource. This includes images as well as data stored in the database. 12 23. 23 [](/posts/how-to-validate-jwts-in-net-xvztzikiq "How to Validate JWTs in .NET") Article Auth0 · 3y How to Validate JWTs in .NET This article will explain why you need to validate a JWT, what it means in general, and how to do it in the.NET platform.NET. JWTs are an open standard that defines how to share information between parties using the JSON format. The meaning of the token depends on the specific context or application. 11 [See all JWT archives](/tags/jwt/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/jwt/best-of/2023#page","url":"https://daily.dev/tags/jwt/best-of/2023","name":"Best JWT Posts of 2023","description":"The most upvoted JWT posts of 2023, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/jwt/best-of/2023#items","numberOfItems":23,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/sessions-tokens-jwt-sso-and-oauth-in-one-diagram-b69pkqdbb","name":"Sessions, Tokens, JWT, SSO, and OAuth in One Diagram"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/auth-js-5ffbsnfpz","name":"Auth.js"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/ep69-explaining-json-web-token-jwt-to-a-10-year-old-kid-pi7nqpho5","name":"EP69: Explaining JSON Web Token (JWT) To a 10 Year Old Kid"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/password-session-cookie-token-jwt-sso-oauth---authentication-explained---part-1-713xf4khd","name":"Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/stop-using-json-web-tokens-for-user-sessions-jos3ghy3k","name":"Stop using JSON Web tokens for user sessions"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/backend-api-middleware-database-jwt-ooc2gb4ba","name":"Backend API, Middleware, Database, JWT"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/react-performing-authentication-with-jwt-ikqnlmfnk","name":"React: Performing Authentication with JWT"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/how-to-manage-state-in-next-js-13-using-redux-toolkit--ni0uegecf","name":"How to manage state in Next.js 13 using Redux Toolkit."},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/4-common-mistakes-made-by-node-js-developers-zyvxhxlpt","name":"4 Common Mistakes Made by Node.js Developers"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/top-3-security-best-practices-for-handling-jwts-l1piaqcj8","name":"Top 3 security best practices for handling JWTs"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/rust-project-create-an-authentication-server-fxzsskced","name":"Rust Project – Create an Authentication Server"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/jwt-json-web-tokens-explanation-exploitation-0x02--19fchztfv","name":"JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x02)"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/go-fiber-vs-rust-performance-comparison-for-jwt-verify-and-mysql-query-mdikupvba","name":"Go Fiber vs Rust: Performance comparison for JWT verify and MySQL query"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/oauth-tools-the-online-tool-that-goes-beyond-jwts-u5bblf6ua","name":"OAuth.Tools: The Online Tool That Goes beyond JWTs"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/creating-a-chatroom-in-angular-using-amplication-jtk2otxnl","name":"Creating a Chatroom in Angular using Amplication"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/using-json-web-encryption-jwe--tnssjqtdb","name":"Using JSON Web Encryption (JWE)"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/add-a-slack-chatbox-directly-into-your-react-app-8uxcdxa8v","name":"Add a Slack Chatbox Directly into Your React App"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/authentication-for-the-frontend-cloud-vercel-owjznyj1r","name":"Authentication for the frontend cloud – Vercel"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/jwt-json-web-tokens-explanation-exploitation-0x01--vifebg2qc","name":"JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x01)"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/secure-go-apis-with-decentralized-identity-tokens-part-1-le1pppl4m","name":"Secure Go APIs with Decentralized Identity Tokens, Part 1"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/create-secure-login-and-registration-with-jwt-best-security-practices-njwl6jltt","name":"Create Secure Login and Registration with JWT & Best Security Practices"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/laravel-authentication-and-authorization-jwt-and-policies-ldqthdcuz","name":"Laravel Authentication and Authorization: JWT and Policies"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/how-to-validate-jwts-in-net-xvztzikiq","name":"How to Validate JWTs in .NET"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"JWT","item":"https://daily.dev/tags/jwt"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/jwt/best-of"},{"@type":"ListItem","position":5,"name":"2023"}]}]} ```