Chapter 5. Self Contained Tokens with JWT
This chapter will cover the following recipes:
- Generating access tokens as JWT
- Validating JWT tokens at the Resource Server side
- Adding custom claims on JWT
- Asymmetric signing of a JWT token
- Validating asymmetric signed JWT token
- Using JWE to cryptographically protect JWT tokens
- Using JWE at the Resource Server side
- Using proof-of-possession key semantics on OAuth 2.0 Provider
- Using proof-of-possession key on the client side