learn hapi — What is JOSE in JWT (2024)

Table of Contents
Moonshoot hapi Series Overview University Enrollment Required Build “Futureflix” and be hapi 😉

Moonshoot

  • Intro

You may read the “JOSE” keyword when searching the Internet for details on JSON web tokens. Well, you’re likely to find “JOSE” in references to the JWT specification and not in actionable tutorials.

What is JOSE in combination with JWT? That’s a good question!

JWT defines the token format, but JOSE defines a collection of specifications. For example, JOSE defines how to handle signing or encryption when using JWTs.

Let’s explore JWT and JOSE in more detail and how both work together!

hapi Series Overview

  • hapi
  • Futureflix
  • Futureflix API
  • Build a Rate Limiter
  • JWT Authentication
  • Server
  • Authentication
  • Views
  • Plugins
  • Routes
  • Requests
  • Responses
  • Validation
  • Security
  • Logging
  • Testing
  • Deployments

  1. API Login With Username and Password to Generate a JWT

  2. JWT Authentication and Private API Endpoints

  3. Refresh Tokens With JWT Authentication

  4. Create a JWT Utility

  5. JWT Refresh Token for Multiple Devices

  6. Check Refresh Token in Authentication Strategy

  7. Rate Limit Your Refresh Token API Endpoint

  8. How to Revoke a JWT

  9. Invalidate JWTs With Blacklists

  10. JWT Logout (Part 1/2)

  11. JWT “Immediate” Logout (Part 2/2)

  12. A Better Place to Invalidate Tokens

  13. How to Switch the JWT Signing Algorithm

  14. Roll Your Own Refresh Token Authentication Scheme

  15. JWT Claims 101

  16. Use JWT With Asymmetric Signatures (RS256 & Co.)

  17. Encrypt the JWT Payload (The Simple Way)

  18. Increase JWT Security Beyond the Signature

  19. Unsigned JSON Web Tokens (Unsecured JWS)

  20. JWK and JWKS Overview

  21. Provide a JWKS API Endpoint

  22. Create a JWK from a Shared Secret

  23. JWT Verification via JWKS API Endpoint

  24. What is JOSE in JWT

  25. Encrypt a JWT (the JWE Way)

  26. Authenticate Encrypted JWTs (JWE)

  27. Encrypted and Signed JWT (Nested JWT)

  28. Bringing Back JWT Decoding and Authentication

  29. Bringing Back JWT Claims in the JWT Payload

  1. API Login With Username and Password to Generate a JWT
  2. JWT Authentication and Private API Endpoints
  3. Refresh Tokens With JWT Authentication
  4. Create a JWT Utility
  5. JWT Refresh Token for Multiple Devices
  6. Check Refresh Token in Authentication Strategy
  7. Rate Limit Your Refresh Token API Endpoint
  8. How to Revoke a JWT
  9. Invalidate JWTs With Blacklists
  10. JWT Logout (Part 1/2)
  11. JWT “Immediate” Logout (Part 2/2)
  12. A Better Place to Invalidate Tokens
  13. How to Switch the JWT Signing Algorithm
  14. Roll Your Own Refresh Token Authentication Scheme
  15. JWT Claims 101
  16. Use JWT With Asymmetric Signatures (RS256 & Co.)
  17. Encrypt the JWT Payload (The Simple Way)
  18. Increase JWT Security Beyond the Signature
  19. Unsigned JSON Web Tokens (Unsecured JWS)
  20. JWK and JWKS Overview
  21. Provide a JWKS API Endpoint
  22. Create a JWK from a Shared Secret
  23. JWT Verification via JWKS API Endpoint
  24. What is JOSE in JWT
  25. Encrypt a JWT (the JWE Way)
  26. Authenticate Encrypted JWTs (JWE)
  27. Encrypted and Signed JWT (Nested JWT)
  28. Bringing Back JWT Decoding and Authentication
  29. Bringing Back JWT Claims in the JWT Payload

  1. Basic Authentication With Username and Password

  2. Authentication and Remember Me Using Cookies

  3. How to Set a Default Authentication Strategy

  4. Define Multiple Authentication Strategies for a Route

  5. Restrict User Access With Scopes

  7. Access Restriction With Dynamic and Advanced Scopes

  8. hapi - How to Fix „unknown authentication strategy“

  9. Authenticate with GitHub And Remember the Login

  10. Authenticate with GitLab And Remember the User

  11. How to Combine Bell With Another Authentication Strategy

  12. Custom OAuth Bell Strategy to Connect With any Server

  13. Redirect to Previous Page After Login

  14. How to Implement a Complete Sign Up Flow With Email and Password

  15. How to Implement a Complete Login Flow

  16. Implement a Password-Reset Flow


Continue reading

University Enrollment Required

Future Students benefit from value packed videos and tutorials.

Enroll to receive exclusive content or sign in if you’re already a Future Student.

Enroll me for $15/mo

Build “Futureflix” and be hapi 😉

Futureflix is your own Netflix-like streaming platform and the app you’re building throughout the learn hapi learning path.

Other courses in the Internet use basic and simple examples. That leaves you with a guessing game on complex features.

In learn hapi, you’ll implement an advanced hapi application from start to end

Grow yourself by working through user accounts & authentication, security, developer goodies, sending emails, building a REST API, full text search, powerful pagination.

learn hapi — What is JOSE in JWT (2024)
Top Articles
12 Budget Tips That Work | Living On One Income
6 Sneaky Signs You Have An Unhealthy Relationship With Money
Local elections live: Keir Starmer hails 'last stop' before general election as scale of Tory collapse becomes clear
Jay Blades' ex wife Jade had to call the police when he went missing
Latest Posts
4 Budget Tweaks You Can Make Right Now - Frugal Living Mom
How to Become Financially Stable by Doing these 8 Things - Adopting a Lifestyle
Article information

Author: Melvina Ondricka

Last Updated:

Views: 5785

Rating: 4.8 / 5 (68 voted)

Reviews: 83% of readers found this page helpful

Author information

Name: Melvina Ondricka

Birthday: 2000-12-23

Address: Suite 382 139 Shaniqua Locks, Paulaborough, UT 90498

Phone: +636383657021

Job: Dynamic Government Specialist

Hobby: Kite flying, Watching movies, Knitting, Model building, Reading, Wood carving, Paintball

Introduction: My name is Melvina Ondricka, I am a helpful, fancy, friendly, innocent, outstanding, courageous, thoughtful person who loves writing and wants to share my knowledge and understanding with you.