Nginx is a powerful reverse proxy routing your domains from the Internet to your applications. This tutorial shows you how to serve a static HTML page with nginx. It walks you through the required paths, files, and configurations. {{outline}} Serve Static HTML Pages with nginx We created a snake browser …

We already touched the encryption aspect in the previous JWT tutorial on encrypting the JWT payload in “a simple way”. The linked tutorial showed you how to encrypt input data and put the encrypted data into the payload of a signed JWT. Here, you’ll create a fully encrypted JWT …

We recently installed the (to this time) newest nginx version 1.17 on a new machine. The created configurations in sites-available were symlinked to sites-enabled, but nginx wasn’t serving any of the domains. The crux here, nginx used the different directory conf.d to store a catch-all default configuration. …

You may read the “JOSE” keyword when searching the Internet for details on JSON web tokens. Well, you’re likely to find “JOSE” in references to the JWT specification and not in actionable tutorials. What is JOSE in combination with JWT? That’s a good question! JWT defines the token …

We recently provisioned a new Debian VM and noticed that the sudo command wasn’t available. Our typical workflow includes the sudo command at the beginning of commands. The good news: you can install the sudo command on Debian and give your user the “sudo” permissions. {{outline}} Install the “sudo” …

When starting out with JWT a shared secret is the simplest way to sign and verify tokens. While developing your application and progressing with the JWT usage, you’re arriving at JSON web keys and key sets. The previous tutorial shows how to use a JWKS API endpoint for authentication. …

Node.js ships with the for…of and for…in loops. These two loops provide a convenient iteration besides the common for loop. Both loops give you a clean syntax for iterations and quick access to keys or values. This tutorial explores both loops in more detail and shows you …

JWT authentication uses a secret to sign or encrypt the tokens. Using an asymmetric algorithm based on a public/private key pair comes with some benefits. One benefit is that you can share the public key with anyone on the Internet. Of course, you must keep your private key safe …