Learn about JSON web token, OAuth 2, and OpenID Connect for web security and access management.

Web App Security

Web application developers are always on the lookout for ways to secure their applications. Considering the rise in the number of cyber-attacks, this has become the most fundamental part of any web application. This module will serve as our handy guide to the basic terminologies and frameworks related to web application security. 
In this module, we’ll learn what JWT is, how a JWT is created, and what benefits it provides in token-based authentication. We’ll learn about the reason HTTPS was first introduced and how it revolutionized the way data is transferred using techniques like encryption and handshake. We’ll also dive deep into the most commonly used authentication and authorization frameworks called OAuth and OpenId Connect. This module will give us a taste of what web API security is all about and provide us with the foundation to build our subsequent knowledge of application security.

Web Security and Access Management: JWT, OAuth 2, OpenId Connect

Congratulations! We successfully completed the “Web Security and Access Management: JWT, OAuth 2 & OpenId Connect” module.
## Summary
We began by learning the basics of HTTPS. The vital concepts we discussed were JSON web token, OAuth 2.0, and OpenID Connect. We learned about Cross-Site Scripting (XSS) attacks, Cross-Site Request Forgery (CSRF), and Denial-of-Service (DoS) attacks.

## What’s next?
Now that we are familiar with the JWT, OAuth 2.0, and OpenID Connect, it’s time for us to move towards understanding HTTPS security headers.

Congratulations! We successfully completed the “Web Security and Access Management: JWT, OAuth 2 & OpenId Connect” module.
# Summary
We began by learning the basics of HTTPS. The vital concepts we discussed were JSON web token, OAuth 2.0, and OpenID Connect. We learned about Cross-Site Scripting (XSS) attacks, Cross-Site Request Forgery (CSRF), and Denial-of-Service (DoS) attacks.

# What’s next?
Now that we are familiar with the JWT, OAuth 2.0, and OpenID Connect, it’s time for us to move towards understanding HTTPS security headers.

Here's a quick summary of the "Web Security and Access Management: JWT, OAuth 2 & OpenId Connect" module.

Getting started with Web Application Security

HTTPS Basics

JSON Web Token

OAuth

OpenID Connect

Conclusion

Final Remarks