How you can protect your resources if you don't Authenticate them ? How you can protect your resources if you don't Authorize them ?
this lecture answer all of the above questions.
- Stateful vs Stateless Authentication
- JWT documentation
- Why should you use JWT's?
- The Anatomy of a JSON Web Token
- What is hashing?
- If you can decode JWT, how are they secure?
- Hashing in Action: Understanding bcrypt
- Hash, Salt and Pepper
- Passwords and hacking: the jargon of hashing, salting and SHA-2 explained
- Password Encryption
- What is AES encryption and how does it work?