3 ms·

Is there a book to learn more indepth about all these?

bimbam1024 9y ago
Its called the internet
cuonic 9y ago
OWASP [0] is a good resource for most things Web Security related [0]: https://www.owasp.org/index.php/JSON_Web_Token_(JWT)_Cheat_Sheet_for_Java https://www.owasp.org/index.php/JSON_Web_Token_(JWT)_Cheat_S...
why-el 9y ago
Not specifically about the web, but Cryptography Engineering: Design Principles and Practical Applications is my favorite book on the subject. It's not a thorough treatment of the subject of security, but it shows how much care needs to be given to such systems and why security is hard in general. Throughout the book you will find plenty of advice on how to approach such problems, even for the web.
skynode 9y ago
For traditional sessions: 1. All You Ever Wanted to Know About Sessions In Node.js (Stormpath) - https://stormpath.com/blog/everything-you-ever-wanted-to-know-about-node-dot-js-sessions https://stormpath.com/blog/everything-you-ever-wanted-to-kno... 2. Express.js Production Best Practices - https://expressjs.com/en/advanced/best-practice-security.html https://expressjs.com/en/advanced/best-practice-security.htm... 3. express-session (npm module) - https://ewiggin.gitbooks.io/expressjs-middleware/content/express-session.html https://ewiggin.gitbooks.io/expressjs-middleware/content/exp... 4. Node.js authentication strategy using Passport.js and Redis - https://blog.risingstack.com/node-hero-node-js-authentication-passport-js/ https://blog.risingstack.com/node-hero-node-js-authenticatio... For JSON Web Tokens: 1. JWT Handbook: https://auth0.com/e-books/jwt-handbook https://auth0.com/e-books/jwt-handbook 2. IETF Specification: https://tools.ietf.org/html/rfc7519 https://tools.ietf.org/html/rfc7519 3. https://jwt.io/ https://jwt.io/ 4. Authentication in React Applications, Part 2: JSON Web Tokens - https://vladimirponomarev.com/blog/authentication-in-react-apps-jwt https://vladimirponomarev.com/blog/authentication-in-react-a... 6. Token Authentication Implementation - https://docs.docker.com/registry/spec/auth/jwt/ https://docs.docker.com/registry/spec/auth/jwt/ 7. JWT Validation and Authorization in ASP.NET Core - https://blogs.msdn.microsoft.com/webdev/2017/04/06/jwt-validation-and-authorization-in-asp-net-core/ https://blogs.msdn.microsoft.com/webdev/2017/04/06/jwt-valid...
somebehemoth 9y ago
I have learned a lot about OAuth from: Mastering OAuth 2.0 by Charles Bihis.

Its called the internet

OWASP [0] is a good resource for most things Web Security related [0]: https://www.owasp.org/index.php/JSON_Web_Token_(JWT)_Cheat_Sheet_for_Java https://www.owasp.org/index.php/JSON_Web_Token_(JWT)_Cheat_S...

why-el 9y ago

Not specifically about the web, but Cryptography Engineering: Design Principles and Practical Applications is my favorite book on the subject. It's not a thorough treatment of the subject of security, but it shows how much care needs to be given to such systems and why security is hard in general. Throughout the book you will find plenty of advice on how to approach such problems, even for the web.

skynode 9y ago

For traditional sessions: 1. All You Ever Wanted to Know About Sessions In Node.js (Stormpath) - https://stormpath.com/blog/everything-you-ever-wanted-to-know-about-node-dot-js-sessions https://stormpath.com/blog/everything-you-ever-wanted-to-kno... 2. Express.js Production Best Practices - https://expressjs.com/en/advanced/best-practice-security.html https://expressjs.com/en/advanced/best-practice-security.htm... 3. express-session (npm module) - https://ewiggin.gitbooks.io/expressjs-middleware/content/express-session.html https://ewiggin.gitbooks.io/expressjs-middleware/content/exp... 4. Node.js authentication strategy using Passport.js and Redis - https://blog.risingstack.com/node-hero-node-js-authentication-passport-js/ https://blog.risingstack.com/node-hero-node-js-authenticatio... For JSON Web Tokens: 1. JWT Handbook: https://auth0.com/e-books/jwt-handbook https://auth0.com/e-books/jwt-handbook 2. IETF Specification: https://tools.ietf.org/html/rfc7519 https://tools.ietf.org/html/rfc7519 3. https://jwt.io/ https://jwt.io/ 4. Authentication in React Applications, Part 2: JSON Web Tokens - https://vladimirponomarev.com/blog/authentication-in-react-apps-jwt https://vladimirponomarev.com/blog/authentication-in-react-a... 6. Token Authentication Implementation - https://docs.docker.com/registry/spec/auth/jwt/ https://docs.docker.com/registry/spec/auth/jwt/ 7. JWT Validation and Authorization in ASP.NET Core - https://blogs.msdn.microsoft.com/webdev/2017/04/06/jwt-validation-and-authorization-in-asp-net-core/ https://blogs.msdn.microsoft.com/webdev/2017/04/06/jwt-valid...

somebehemoth 9y ago

I have learned a lot about OAuth from: Mastering OAuth 2.0 by Charles Bihis.