DEV Community

#jwt

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
How JWTs Work, and Why Decoding Is Not Verification

How JWTs Work, and Why Decoding Is Not Verification

Comments
2 min read
Your JWT secret might literally be "secret". Here's how to check.

Your JWT secret might literally be "secret". Here's how to check.

Comments
3 min read
Base64 Encoding Explained: The 6-Bit Math, Padding Rules, and When Not to Use It (2026)

Base64 Encoding Explained: The 6-Bit Math, Padding Rules, and When Not to Use It (2026)

Comments
9 min read
Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT

Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT

Comments
8 min read
Refresh Token Rotation Explained: What Happens When a Token Is Reused?

Refresh Token Rotation Explained: What Happens When a Token Is Reused?

Comments
14 min read
Rotating refresh tokens with reuse detection in Spring Boot 4 (no extra JWT library)

Rotating refresh tokens with reuse detection in Spring Boot 4 (no extra JWT library)

Comments
6 min read
Stateless REST APIs' Scalability Benefits Questioned as State Shifts to Other Components

Stateless REST APIs' Scalability Benefits Questioned as State Shifts to Other Components

1
Comments
8 min read
JWT vs. Sessions: Which Authentication Should You Use?

JWT vs. Sessions: Which Authentication Should You Use?

Comments
8 min read
Stop Guessing at Auth Bugs: Decode the JWT First

Stop Guessing at Auth Bugs: Decode the JWT First

Comments
4 min read
Replacing Basic Auth with JWT and OAuth2 in Spring Security

Replacing Basic Auth with JWT and OAuth2 in Spring Security

Comments
3 min read
Social Sign-In JWT Verification: Surviving Key Rotation Without Authentication Outages

Social Sign-In JWT Verification: Surviving Key Rotation Without Authentication Outages

Comments
8 min read
We changed one timeout from 30 to 480 and back to 30. In between, it stopped meaning the same thing

We changed one timeout from 30 to 480 and back to 30. In between, it stopped meaning the same thing

Comments
19 min read
Day 181 of Learning MERN Stack

Day 181 of Learning MERN Stack

Comments
1 min read
Why You Should Hash Refresh Tokens with SHA-256

Why You Should Hash Refresh Tokens with SHA-256

Comments
12 min read
JWT Refresh Tokens: How They Make Login Systems Safer and More Practical

JWT Refresh Tokens: How They Make Login Systems Safer and More Practical

1
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.