Let's Talk About JWT

Explore the world of JSON Web Tokens (JWTs) in this 26-minute conference talk from EuroPython 2022. Dive into the history, structure, and practical applications of JWTs in API access and user data management. Learn about the three-part structure of JWTs, including headers, payloads, and signatures, as well as the various claims they can carry. Understand the algorithms used in token creation and discover how to use JWTs as access or ID tokens. Follow along as the speaker demonstrates creating and validating a JWT using the PyJWT library. Gain valuable insights into best practices and potential pitfalls to ensure safer implementation of JWTs in your projects. By the end of this talk, you'll have a comprehensive understanding of JWTs, from their origins in the JOSE specification to practical implementation tips for enhanced security in your applications.