Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519)
Authentification sans état, structure en 3 parties, Base64URL, attaques de confusion d’algorithmes et signature.
Web Protocols & Security Architecture Research
Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519)
TL;DR — Points Clés d’Ingénierie
- Un JWT rassemble 3 sections distinctes : le Header, le Payload et la Signature.
- Les données sont encodées en Base64URL et restent lisibles par n’importe quel client sans clé secrète.
- Décoder un JWT n’est PAS le valider : la sécurité repose sur la vérification cryptographique de la signature.
- L’attaque
alg: "none"survient lorsqu’un serveur accepte des jetons non signés. - L’architecture sans état rend l’invalidation immédiate dépendante de listes de révocation.
Concepts Clés et Architecture
Compact Serialization
StructureString format structured as `header.payload.signature` optimized for HTTP Authorization headers and URL parameters.
Registered Claims
ClaimsStandard predefined metadata fields (`iss` issuer, `sub` subject, `aud` audience, `exp` expiration, `iat` issued-at).
Symmetric Signing (HS256)
SigningBoth the identity provider and the API gateway share the identical secret key to sign and verify tokens.
Asymmetric Signing (RS256 / ES256)
PKIIdentity provider signs tokens with a private key; multiple microservices verify tokens using a public JWKS endpoint.
Stateless Verification
ScalabilityServices verify authorization cryptographically using keys in memory without database lookups.
Comment fonctionne Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519) ?
When an authentication server validates a user’s credentials, it constructs a JSON payload containing user identity and authorization claims. It serializes the header and payload as Base64URL strings, concatenates them with a dot, and feeds the resulting string into a cryptographic signing function along with a private secret or key. The resulting signature is appended. Downstream services verify the token by recomputing or validating the signature against the received header and payload.
Header Construction
Declare the signing algorithm (e.g. HS256) and type.
{"alg": "HS256", "typ": "JWT"}Payload Construction
Populate registered claims (`exp`, `iat`) and domain-specific roles.
{"sub": "usr_9918", "role": "admin", "exp": 1799000000}Base64URL Encoding
Convert JSON bytes into URL-safe strings without padding (= characters replaced).
header_b64 = base64url(header);
payload_b64 = base64url(payload);Cryptographic Signature
Hash the concatenated header and payload with secret key.
sig = HMAC_SHA256(header_b64 + "." + payload_b64, secret);Token Assembly
Join all 3 components with periods to form the final compact token string.
jwt = header_b64 + "." + payload_b64 + "." + base64url(sig);Bearer Token Transmission
Client includes token in Authorization header for subsequent API requests.
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...Comment implémenter Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519) en pratique ?
Verifying a JWT Signature in Node.js (Crypto Native API)
javascriptimport crypto from "crypto";
function verifyHS256(jwt, secret) {
const [headerB64, payloadB64, signatureB64] = jwt.split(".");
if (!headerB64 || !payloadB64 || !signatureB64) return false;
const data = `${headerB64}.${payloadB64}`;
const expectedSig = crypto
.createHmac("sha256", secret)
.update(data)
.digest("base64url");
// Constant-time comparison to prevent timing attacks
return crypto.timingSafeEqual(
Buffer.from(signatureB64),
Buffer.from(expectedSig)
);
}Détails d’Ingénierie: Native cryptographic verification using timing-safe buffer comparison to prevent side-channel timing attacks.
Decoding JWT Claims in Browser JavaScript (Client-Side Safe)
javascriptfunction parseJwtPayload(token) {
const base64Url = token.split(".")[1];
const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
const jsonPayload = decodeURIComponent(
atob(base64)
.split("")
.map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2))
.join("")
);
return JSON.parse(jsonPayload);
}Détails d’Ingénierie: Pure client-side parsing without third-party dependencies, properly handling Unicode UTF-8 character boundaries.
Où et pourquoi utilise-t-on Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519) en production ?
API gateway receives user login, issues RS256 token; 50 downstream microservices independently verify claims.
Services download the gateway’s public JWKS (`/.well-known/jwks.json`) once and cache it, avoiding auth server query bottlenecks.
iOS and Android native applications maintaining offline access tokens with refresh rotation.
Access token valid for 15 minutes; refresh token stored in OS Keychain used to request fresh JWTs silently.
Quelles sont les erreurs courantes concernant Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519) ?
Impact: Sensitive passwords, SSNs, or PII stored in payload are visible to anyone who intercepts the token.
Correction Recommandée: Remember that standard JWS tokens are signed, not encrypted. Use JWE (RFC 7516) or store only non-sensitive IDs in claims.
Impact: Attackers modify the header to `"alg": "none"`, strip the signature, and forge arbitrary admin permissions.
Correction Recommandée: Hardcode expected verification algorithms on the server (e.g. `algorithms: ["HS256"]`) and reject any `"alg": "none"`.
Impact: Stolen tokens remain valid perpetually, enabling indefinite account takeovers.
Correction Recommandée: Always mandate strict expiration checks against current UTC timestamp (`exp < Math.floor(Date.now() / 1000)`).
Quels sont les risques et implications sécuritaires de Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519) ?
Algorithm Confusion Attack (HMAC vs RSA Key Confusion)
CVE-2015-9235 (Algorithm Confusion)Vulnérabilité: Server expects RS256 with public key; attacker signs token using HMAC-SHA256 with the server’s public key as the symmetric secret.
Weak Symmetric Secrets & Brute-Forcing
CWE-326 Inadequate Encryption StrengthVulnérabilité: Using a weak HMAC secret (e.g. "secret123") allows attackers to brute-force the key offline using Hashcat at billions of guesses per second.
Comment diagnostiquer et corriger les erreurs avec Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519) ?
Symptômes et Signes Cliniques: JsonWebTokenError: invalid signature
- Secret key mismatch between issuer and validator
- Payload mutated in transit
- Trailing whitespace or padding corrupted Base64URL string
Symptômes et Signes Cliniques: TokenExpiredError: jwt expired
- `exp` timestamp in the past
- Server clock drift between issuer and verifier servers
Questions Fréquentes sur Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519)
Q:Is the data inside a standard JWT encrypted?
A signature guarantees integrity (that data was not tampered with) and authenticity (who created it), but provides zero confidentiality. If confidential payload data is required, JSON Web Encryption (JWE, RFC 7516) must be used.
Q:What is the difference between HS256 and RS256?
HS256 is ideal for monolithic apps where only one backend needs to verify the token. RS256 is preferred in microservices because worker services only need the public key and cannot forge their own tokens.
Q:How do you revoke a JWT before it expires?
Pure statelessness means the token is self-contained. To revoke immediately, architectures typically store a `jti` (JWT ID) blacklist in a low-latency Redis cache or invalidate the user’s token generation counter.
Outils Développeur Associés
Exécution 100% Côté Client
Glossaire
References & Primary Sources
Every source below directly substantiates technical statements and protocol behaviors explained in Qu’est-ce qu’un JWT ? Architecture des JSON Web Tokens (RFC 7519). Curious-Techie prioritizes official Internet standards (IETF RFCs, W3C Recommendations, WHATWG specifications) and established security bodies (OWASP, NIST). Zero sponsored or secondary links.
- [1]IETFPrimary SpecificationRFC 7519 • Section 3 & 4Verified Primary SourceTechnical Claim Supported:
Defines the compact, URL-safe format of JSON Web Tokens consisting of three Base64URL segments (Header, Payload, Signature) and registered claims (iss, sub, aud, exp, nbf, iat, jti).
“A JWT is represented as the concatenation of the Encoded JWT Header, the Encoded JWT Claims Set, and the Encoded JWT Signature or Encoded JWT Encryption Data, with the parts being separated by period ('.') characters.”Source URI: https://datatracker.ietf.org/doc/html/rfc7519 - [2]IETFPrimary SpecificationRFC 7515 • Section 4 (Cryptographic Signatures)Verified Primary SourceTechnical Claim Supported:
Defines digital signatures and MAC algorithms (HS256, RS256, ES256) used to secure JWT integrity and verify token authorship.
Source URI: https://datatracker.ietf.org/doc/html/rfc7515 - [3]IETFAuthoritative Security StandardRFC 8725 • Security Considerations § 3Verified Primary SourceTechnical Claim Supported:
Mandates explicit algorithm validation on receiving servers, prohibiting the insecure "alg: none" algorithm and enforcing strict signature verification.
Source URI: https://datatracker.ietf.org/doc/html/rfc8725 - [4]OWASPAuthoritative Security StandardOWASP Cheat Sheet Series • Token Storage & RevocationVerified Primary SourceTechnical Claim Supported:
Details token theft mitigation, recommending storage in secure HttpOnly cookies over localStorage and outlining token revocation strategies.
Écosystème Technique Associé et Prochaines Étapes
Outils Développeur Associés
Articles Techniques Associés
JWT vs Session-Based Authentication: Architecture & Performance
Compare database session lookups with stateless JWT verification across scalability and revocation.
Troubleshooting: JWT Works in Postman but Fails in Browser
Diagnose and remediate CORS header stripping, HttpOnly cookie constraints, and preflight authorization failures.
Questions Connexes
Can a JWT Be Decrypted by Anyone?
Answer: Yes, standard JSON Web Tokens (JWS) are signed, not encrypted. Anyone can decode and inspect the payload without the secret key.
Why Shouldn't You Store JWTs in LocalStorage?
Answer: Storing tokens in localStorage exposes them to instant exfiltration by any Cross-Site Scripting (XSS) vulnerability.
Can an Expired JWT Token Still Be Verified?
Answer: Yes, the cryptographic signature remains mathematically valid, but compliant libraries reject the token because exp is checked after signature verification.
Spécifications et Références Développeur
Poursuivre l’Apprentissage
JWT Interactive Tampering & Validation Lab
Put your theoretical understanding into practice by tampering with claims and testing signature rejection in the live sandbox.