dwyl/learn-json-web-tokens

Respond to the link/clickbait post on Prevoty Blog

Open

#66 opened on Jun 12, 2016

View on GitHub
 (2 comments) (2 reactions) (0 assignees)JavaScript (4,175 stars) (267 forks)batch import
bughelp wanted

Description

http://blog.prevoty.com/does-jwt-put-your-web-app-at-risk The blog does not accept comments so I propose we have a section in the readme for our response...

Contributor guide

Tech stack
javascript
Domain
documentationsecurity
Issue type
documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Familiarity with JWTRead the Prevoty blog post
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70
Research direction
First, read the blog post at http://blog.prevoty.com/does jwt put your web app at risk to understand the arguments. Then, evaluate the claims with respect to JWT best practices. Finally, add a new section in the README.md to provide a rebuttal or clarification, citing relevant resources.