Skip to content
StackPractices

Tag: jwt

Browse 13 practical software engineering resources tagged with "jwt". Discover code recipes, design patterns, documentation templates, and in-depth guides to help you build, deploy, and maintain production-ready solutions involving jwt.

Secure API Key Authentication for Services and Clients

How to generate, distribute, validate, and rotate API keys for machine-to-machine authentication using HMAC signatures, scopes, and rate-limited key policies.

JWT Authentication

How to generate, validate, and refresh JSON Web Tokens for stateless API authentication.

Implement Passwordless Login with Magic Links

How to build secure passwordless authentication using time-limited magic links sent via email, with token generation, validation, and replay attack prevention.

Node.js JWT Authentication: Verify and Refresh Tokens

Implement JWT authentication in Node.js with access and refresh tokens

OAuth 2.0 Login

How to implement OAuth 2.0 authentication with Google, GitHub, and other providers.

Password Hashing

How to securely hash and verify passwords using modern algorithms across Python, JavaScript, and Java.

Implement Secure Session Management

How to create, validate, and expire user sessions securely across web applications using cookies, tokens, and server-side storage.

Two-Factor Authentication (2FA / TOTP)

How to implement time-based one-time password (TOTP) two-factor authentication for secure user login.

Secure JWT Refresh Token Rotation with Python

Implement secure JWT access and refresh token rotation in Python with blacklist, reuse detection, and automatic access token renewal for stateless auth

Secure API Gateway with Custom Lambda Authorizers

Implement custom Lambda authorizers for API Gateway with JWT validation, IAM policy generation, and caching for token-based authentication in serverless APIs.

API Authentication Design Template

Template for documenting API authentication flows and token lifecycle: auth scheme selection, token types, issuance, validation, refresh, revocation, MFA, OAuth2 flows, JWT configuration, and security best practices with code examples.

Complete Guide to Authentication Patterns

Implement authentication in production. Covers JWT, OAuth2, session-based auth, passkeys, MFA, refresh tokens, token rotation, RBAC, ABAC, SSO with SAML and OpenID Connect, and secure logout patterns with practical code examples.

OAuth2 and OIDC: Authorization Code, PKCE, Token Validation

Master OAuth2 and OpenID Connect for production: authorization code flow with PKCE, token validation, refresh tokens, scopes, JWT verification, and security best practices.