JSON Web Token is an open standard for creating tokens that assert some number of claims like a logged-in user and his/her roles, widely used as a stateless authentication mechanism.

This talk guides you through various security risks of JWT, including vulnerabilities in algorithms and libraries, token cracking, token sidejacking, and more. In live demos, you’ll learn how to hijack a user account exploiting common security vulnerabilities. You’ll also find out about common mistakes and vulnerabilities along with the best practices related to the implementation of JWT authentication.