¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)
Autenticación stateless, estructura de cabecera/payload/firma, Base64URL, ataques de algoritmo y verificación criptográfica.
Web Protocols & Security Architecture Research
¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)
TL;DR — Conclusiones Clave de Ingeniería
- Un JWT se compone de tres partes separadas por puntos: Header, Payload y Firma.
- El contenido está codificado en Base64URL, por lo que cualquiera puede leer los datos sin la clave secreta.
- Decodificar un token NO equivale a validarlo: la verificación requiere recalcular la firma con la clave.
- La vulnerabilidad
alg: "none"ocurre cuando un backend acepta tokens sin validar su firma. - Al ser tokens sin estado (stateless), la revocación inmediata suele requerir listas de revocación.
Conceptos Clave y Arquitectura
Compact Serialization
StructureString format structured as `header.payload.signature` optimized for HTTP Authorization headers and URL parameters.
Registered Claims
ClaimsStandard predefined metadata fields (`iss` issuer, `sub` subject, `aud` audience, `exp` expiration, `iat` issued-at).
Symmetric Signing (HS256)
SigningBoth the identity provider and the API gateway share the identical secret key to sign and verify tokens.
Asymmetric Signing (RS256 / ES256)
PKIIdentity provider signs tokens with a private key; multiple microservices verify tokens using a public JWKS endpoint.
Stateless Verification
ScalabilityServices verify authorization cryptographically using keys in memory without database lookups.
¿Cómo funciona ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)?
When an authentication server validates a user’s credentials, it constructs a JSON payload containing user identity and authorization claims. It serializes the header and payload as Base64URL strings, concatenates them with a dot, and feeds the resulting string into a cryptographic signing function along with a private secret or key. The resulting signature is appended. Downstream services verify the token by recomputing or validating the signature against the received header and payload.
Header Construction
Declare the signing algorithm (e.g. HS256) and type.
{"alg": "HS256", "typ": "JWT"}Payload Construction
Populate registered claims (`exp`, `iat`) and domain-specific roles.
{"sub": "usr_9918", "role": "admin", "exp": 1799000000}Base64URL Encoding
Convert JSON bytes into URL-safe strings without padding (= characters replaced).
header_b64 = base64url(header);
payload_b64 = base64url(payload);Cryptographic Signature
Hash the concatenated header and payload with secret key.
sig = HMAC_SHA256(header_b64 + "." + payload_b64, secret);Token Assembly
Join all 3 components with periods to form the final compact token string.
jwt = header_b64 + "." + payload_b64 + "." + base64url(sig);Bearer Token Transmission
Client includes token in Authorization header for subsequent API requests.
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...¿Cómo se implementa ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519) en la práctica?
Verifying a JWT Signature in Node.js (Crypto Native API)
javascriptimport crypto from "crypto";
function verifyHS256(jwt, secret) {
const [headerB64, payloadB64, signatureB64] = jwt.split(".");
if (!headerB64 || !payloadB64 || !signatureB64) return false;
const data = `${headerB64}.${payloadB64}`;
const expectedSig = crypto
.createHmac("sha256", secret)
.update(data)
.digest("base64url");
// Constant-time comparison to prevent timing attacks
return crypto.timingSafeEqual(
Buffer.from(signatureB64),
Buffer.from(expectedSig)
);
}Detalles de Ingeniería: Native cryptographic verification using timing-safe buffer comparison to prevent side-channel timing attacks.
Decoding JWT Claims in Browser JavaScript (Client-Side Safe)
javascriptfunction parseJwtPayload(token) {
const base64Url = token.split(".")[1];
const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
const jsonPayload = decodeURIComponent(
atob(base64)
.split("")
.map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2))
.join("")
);
return JSON.parse(jsonPayload);
}Detalles de Ingeniería: Pure client-side parsing without third-party dependencies, properly handling Unicode UTF-8 character boundaries.
¿Dónde y por qué se utiliza ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519) en producción?
API gateway receives user login, issues RS256 token; 50 downstream microservices independently verify claims.
Services download the gateway’s public JWKS (`/.well-known/jwks.json`) once and cache it, avoiding auth server query bottlenecks.
iOS and Android native applications maintaining offline access tokens with refresh rotation.
Access token valid for 15 minutes; refresh token stored in OS Keychain used to request fresh JWTs silently.
¿Cuáles son los errores y malentendidos comunes con ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)?
Impacto: Sensitive passwords, SSNs, or PII stored in payload are visible to anyone who intercepts the token.
Corrección Recomendada: Remember that standard JWS tokens are signed, not encrypted. Use JWE (RFC 7516) or store only non-sensitive IDs in claims.
Impacto: Attackers modify the header to `"alg": "none"`, strip the signature, and forge arbitrary admin permissions.
Corrección Recomendada: Hardcode expected verification algorithms on the server (e.g. `algorithms: ["HS256"]`) and reject any `"alg": "none"`.
Impacto: Stolen tokens remain valid perpetually, enabling indefinite account takeovers.
Corrección Recomendada: Always mandate strict expiration checks against current UTC timestamp (`exp < Math.floor(Date.now() / 1000)`).
¿Cuáles son las implicaciones de seguridad y riesgos de ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)?
Algorithm Confusion Attack (HMAC vs RSA Key Confusion)
CVE-2015-9235 (Algorithm Confusion)Vulnerabilidad: Server expects RS256 with public key; attacker signs token using HMAC-SHA256 with the server’s public key as the symmetric secret.
Weak Symmetric Secrets & Brute-Forcing
CWE-326 Inadequate Encryption StrengthVulnerabilidad: Using a weak HMAC secret (e.g. "secret123") allows attackers to brute-force the key offline using Hashcat at billions of guesses per second.
¿Cómo solucionar y depurar errores con ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)?
Síntomas e Indicaciones Clínicas: JsonWebTokenError: invalid signature
- Secret key mismatch between issuer and validator
- Payload mutated in transit
- Trailing whitespace or padding corrupted Base64URL string
Síntomas e Indicaciones Clínicas: TokenExpiredError: jwt expired
- `exp` timestamp in the past
- Server clock drift between issuer and verifier servers
Preguntas Frecuentes sobre ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519)
Q:Is the data inside a standard JWT encrypted?
A signature guarantees integrity (that data was not tampered with) and authenticity (who created it), but provides zero confidentiality. If confidential payload data is required, JSON Web Encryption (JWE, RFC 7516) must be used.
Q:What is the difference between HS256 and RS256?
HS256 is ideal for monolithic apps where only one backend needs to verify the token. RS256 is preferred in microservices because worker services only need the public key and cannot forge their own tokens.
Q:How do you revoke a JWT before it expires?
Pure statelessness means the token is self-contained. To revoke immediately, architectures typically store a `jti` (JWT ID) blacklist in a low-latency Redis cache or invalidate the user’s token generation counter.
Herramientas Relacionadas
Ejecución 100% en el Navegador
Glosario
References & Primary Sources
Every source below directly substantiates technical statements and protocol behaviors explained in ¿Qué es JWT? Arquitectura de JSON Web Tokens (RFC 7519). Curious-Techie prioritizes official Internet standards (IETF RFCs, W3C Recommendations, WHATWG specifications) and established security bodies (OWASP, NIST). Zero sponsored or secondary links.
- [1]IETFPrimary SpecificationRFC 7519 • Section 3 & 4Verified Primary SourceTechnical Claim Supported:
Defines the compact, URL-safe format of JSON Web Tokens consisting of three Base64URL segments (Header, Payload, Signature) and registered claims (iss, sub, aud, exp, nbf, iat, jti).
“A JWT is represented as the concatenation of the Encoded JWT Header, the Encoded JWT Claims Set, and the Encoded JWT Signature or Encoded JWT Encryption Data, with the parts being separated by period ('.') characters.”Source URI: https://datatracker.ietf.org/doc/html/rfc7519 - [2]IETFPrimary SpecificationRFC 7515 • Section 4 (Cryptographic Signatures)Verified Primary SourceTechnical Claim Supported:
Defines digital signatures and MAC algorithms (HS256, RS256, ES256) used to secure JWT integrity and verify token authorship.
Source URI: https://datatracker.ietf.org/doc/html/rfc7515 - [3]IETFAuthoritative Security StandardRFC 8725 • Security Considerations § 3Verified Primary SourceTechnical Claim Supported:
Mandates explicit algorithm validation on receiving servers, prohibiting the insecure "alg: none" algorithm and enforcing strict signature verification.
Source URI: https://datatracker.ietf.org/doc/html/rfc8725 - [4]OWASPAuthoritative Security StandardOWASP Cheat Sheet Series • Token Storage & RevocationVerified Primary SourceTechnical Claim Supported:
Details token theft mitigation, recommending storage in secure HttpOnly cookies over localStorage and outlining token revocation strategies.
Ecosistema Técnico Relacionado y Próximos Pasos
Herramientas Relacionadas
Artículos Técnicos Relacionados
JWT vs Session-Based Authentication: Architecture & Performance
Compare database session lookups with stateless JWT verification across scalability and revocation.
Troubleshooting: JWT Works in Postman but Fails in Browser
Diagnose and remediate CORS header stripping, HttpOnly cookie constraints, and preflight authorization failures.
Preguntas Relacionadas
Can a JWT Be Decrypted by Anyone?
Answer: Yes, standard JSON Web Tokens (JWS) are signed, not encrypted. Anyone can decode and inspect the payload without the secret key.
Why Shouldn't You Store JWTs in LocalStorage?
Answer: Storing tokens in localStorage exposes them to instant exfiltration by any Cross-Site Scripting (XSS) vulnerability.
Can an Expired JWT Token Still Be Verified?
Answer: Yes, the cryptographic signature remains mathematically valid, but compliant libraries reject the token because exp is checked after signature verification.
Especificaciones y Referencias Técnicas
Continuar Aprendiendo
JWT Interactive Tampering & Validation Lab
Put your theoretical understanding into practice by tampering with claims and testing signature rejection in the live sandbox.