[9] Stop using JWT for sessions - joepie91's Ramblings
( ())
http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/
[10] Stop using JWT for sessions, part 2: Why your solution doesn't work - joepie91's Ramblings
( ())
http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-for-sessions-part-2-why-your-solution-doesnt-work/
[11] Mapbox API Documentation
()
https://www.mapbox.com/api-documentation/#the-token-format
Mapbox uses JSON Web Tokens (JWT) as the token format.
[12] HipChat - API v2 - Webhooks
()
https://www.hipchat.com/docs/apiv2/webhooks
Webhooks declared by an add-on can optionally receive a JWT authenticating the request. The JWT is sent in the Authorization header and has the same structure as the JWT sent in the signed_request query parameter for configuration pages and other UI elements:
POST /echo HTTP/1.1
Host: addon.example.com
Authorization: JWT eyJhbGciOiAiSFMyNTYiLCAi...
Content-Length: 646
Content-Type: application/json
[13] Bitbucket API
()
https://developer.atlassian.com/bitbucket/api/2/reference/meta/authentication
5. Bitbucket Cloud JWT Grant (urn:bitbucket:oauth2:jwt)
If your Atlassian Connect add-on uses JWT authentication, you can swap a JWT for an OAuth access token. The resulting access token represents the account for which the add-on is installed.
Make sure you send the JWT token in the Authorization request header using the "JWT" scheme (case sensitive). Note that this custom scheme makes this different from HTTP Basic Auth (and so you cannot use "curl -u").
$ curl -X POST -H "Authorization: JWT {jwt_token}" \
https://bitbucket.org/site/oauth2/access_token \
-d grant_type=urn:bitbucket:oauth2:jwt
[14] Features | Netlify
()
https://www.netlify.com/features/
With JWT Based Access Control you build sites with any site generator and enable granular role based permissions while delegating authentication and user management to any service that can issue JSON Web Tokens.