Self Contained Tokens with JWT

This chapter will cover the following recipes:

• Generating access tokens as JWT
• Validating JWT tokens at the Resource Server side
• Adding custom claims on JWT
• Asymmetric signing of a JWT token
• Validating asymmetric signed JWT token
• Using JWE to cryptographically protect JWT tokens
• Using JWE at the Resource Server side
• Using proof-of-possession key semantics on OAuth 2.0 Provider
• Using proof-of-possession key on the client side