6 Minute Overview of Implementing JWT Authentication
I'm not a security expert, but here is what I know about JWT. I'll talk about refresh tokens next.
good reads:
- https://dev.to/cotter/localstorage-vs-cookies-all-you-need-to-know-about-storing-jwt-tokens-securely-in-the-front-end-15id
- https://hasura.io/blog/best-practices-of-using-jwt-with-graphql/
This diagram was created using https://bramp.github.io/js-sequence-diagrams/
The DSL used to generated this is Base64 Encoded if you want to use it, just decode it and paste it into the link above ^:
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
------------
🔔 Newsletter http://eepurl.com/hnderP
🤓 ES6 Udemy Course https://tinyurl.com/yxdvf2zl
🐦 Twitter https://twitter.com/thewebdevjunkie
📷 Instagram https://www.instagram.com/thewebdevjunkie/
💬 Discord https://discord.gg/4kGbBaa
📁. GitHub https://github.com/codyseibert/youtube