Learn about JSON web token, OAuth, and OpenID Connect for web security and access management.

Cyber Security Fundamentals

This module will serve as our ultimate guide to the basic terminologies and frameworks related to web application security. We’ll learn what JWT is, how a JWT is created, and what benefits it provides in token-based authentication. We’ll learn about the reason HTTPS was first introduced and how it revolutionized the way data is transferred using techniques like encryption and handshake. We’ll also dive deep into the most commonly used authentication and authorization frameworks called OAuth and OpenID Connect. 

By the end of this module, we'll understand what web API security is all about and the foundation to build our subsequent knowledge of application security.

Web Security and Access Management: JWT, OAuth2 & OpenID Connect

Congratulations! We have successfully completed the “Web Security and Access Management: JWT, OAuth 2 & OpenID Connect” module.

## Summary
We started with the Cross-site Scripting Attack(XSS), and Cross-site Request Forgery(CSRF), and how to prevent them. We also learned about HTTP and SSL certificates. Then we moved to JSON web tokens, JWT validation, and OAuth. Finally, we learned about OpenID Connect and flow for authentication.

## Takeaways
* We learned the basic cyber attacks, including detection, protection, and response according to cyber attacks.
* We learned simple practices to defend our system from attacks related to patching, vulnerabilities, cryptography, and phishing.
* We learned web security techniques through HTTP headers and cookies, situationals, the anatomy of DDoS attacks, and bug bounty programs.
* We learned about web security and access management, including JWT, OAuth, and OpenID Connect.

Congratulations! We have successfully completed the “Web Security and Access Management: JWT, OAuth 2 & OpenID Connect” module.

# Summary
We started with the Cross-site Scripting Attack(XSS), and Cross-site Request Forgery(CSRF), and how to prevent them. We also learned about HTTP and SSL certificates. Then we moved to JSON web tokens, JWT validation, and OAuth. Finally, we learned about OpenID Connect and flow for authentication.

# Takeaways
* We learned the basic cyber attacks, including detection, protection, and response according to cyber attacks.
* We learned simple practices to defend our system from attacks related to patching, vulnerabilities, cryptography, and phishing.
* We learned web security techniques through HTTP headers and cookies, situationals, the anatomy of DDoS attacks, and bug bounty programs.
* We learned about web security and access management, including JWT, OAuth, and OpenID Connect.

Here's a quick summary of the "Web Security and Access Management: JWT, OAuth 2 & OpenID Connect" module.

Getting started with Web Application Security

HTTPS Basics

JSON Web Token

OAuth

OpenID Connect

Conclusion

Final Remarks

Summary