Authentication Methods - A Deep(ish) Dive

Here lies the ramblings of a madwoman; bumbling her way around in the darkness in an attempt to understand the wide world of websec…

… in the absolute broadest of strokes:

• Token-based (JWT):
  • Authentication state is stored on the client (local/session storage) in the form of a token.
• Session-based:
  • Authentication state is stored on the server’s database.

Now, let’s go a little deeper, shall we?

- JSON Web Tokens (JWT)