JWT Token Validation
The discussion delves into the structure and validation of JWT tokens, highlighting two primary methods: direct extraction and introspection. Brian explains how the resource server can verify token validity through a callback to the authorization server, receiving a JSON response that mirrors the JWT payload. The conversation also touches on the importance of certificate binding for proof of possession, ensuring that only authorized clients can present valid tokens.In this clip
From this podcast
Software Engineering Radio - the podcast for professional software developers
Episode 526: Brian Campbell on Proof of Possession Defenses
Related Questions