Marcus is a fullstack JS developer. He’s passionate about the hapi framework for Node.js and loves to build web apps and APIs. Creator of Futureflix and the “learn hapi” learning path.
We already touched the encryption aspect in the previous JWT tutorial on encrypting the JWT payload in “a simple way”. The linked tutorial showed you how to encrypt input data and put the encrypted data into the payload of a signed JWT. Here, you’ll create a fully encrypted JWT …
Continue ReadingWe recently installed the (to this time) newest nginx version 1.17 on a new machine. The created configurations in sites-available were symlinked to sites-enabled, but nginx wasn’t serving any of the domains. The crux here, nginx used the different directory conf.d to store a catch-all default configuration. …
Continue ReadingYou may read the “JOSE” keyword when searching the Internet for details on JSON web tokens. Well, you’re likely to find “JOSE” in references to the JWT specification and not in actionable tutorials. What is JOSE in combination with JWT? That’s a good question! JWT defines the token …
Continue ReadingWe recently provisioned a new Debian VM and noticed that the sudo command wasn’t available. Our typical workflow includes the sudo command at the beginning of commands. The good news: you can install the sudo command on Debian and give your user the “sudo” permissions. {{outline}} Install the “sudo” …
Continue ReadingWhen starting out with JWT a shared secret is the simplest way to sign and verify tokens. While developing your application and progressing with the JWT usage, you’re arriving at JSON web keys and key sets. The previous tutorial shows how to use a JWKS API endpoint for authentication. …
Continue ReadingNode.js ships with the for…of and for…in loops. These two loops provide a convenient iteration besides the common for loop. Both loops give you a clean syntax for iterations and quick access to keys or values. This tutorial explores both loops in more detail and shows you …
Continue Reading
JWT authentication uses a secret to sign or encrypt the tokens. Using an asymmetric algorithm based on a public/private key pair comes with some benefits. One benefit is that you can share the public key with anyone on the Internet. Of course, you must keep your private key safe …
Continue ReadingApplication hosting can become messy over time. You may shut down applications, move applications to a new domain, or you need a subdomain for a limited time. You may need to clean up your nginx configuration here and there to keep your lean setup. Nothing is worse than keeping every …
Continue ReadingFind interesting tutorials and solutions for your problems.