💥 JWT HS256 Signature - Learn What is a Hash-Based Message Authentication Code (HMAC)

[@AngularUniversity]

Note: this video is part of the Angular Security MasterClass - angular-university.io/course/angular-security-course

[@Kopellouroui]

Hey friend! Really good job! Where is the video for rs256?

[@mansimandlik9013]

Thank you sir,well explanation

[@mferreira1231]

Very well explained, thank you!

[@ArcticSilverFox1]

nicely explained!

[@malcolmswaine8983]

Good video - did you ever cover the RS256? Next video in this list kind of skips this :) Thanks for well explained content!

[@alexvalchuk3452]

Thanks!

[@dineshshripatisahai5408]

good explanation

[@Ruslan4ic]

Hey! Good tutorial! I have a question! How do you hide your secret in client side? So someone can reverse engeniring your main.js and steal it? Thx!

[@venkatareddy56]

You should not keep the secret on the client side. The user has to login with user name and password. Then the server sends the jwt. The client side sends this token to the server with every request

[@nmkkannan1256]

It is not recommended to store secrets in the client side, even one should obfuscate the client side code logic that generates and process such tokens.

[@foruvasanth]

how the secret is shared?

[@AngularUniversity]

Hello Vasanth, in the case of HS256, we will need to pre-install the shared secret manually on both servers. This is unlike RS256, which does not require a pre-shared secret. These two methods are discussed in detail during the course, please enjoy. Kind Regards, Vasco

[@foruvasanth]

@@AngularUniversity Thanks Vasco... I couldn't find the video where RS256 is discussed. Can you please share it. Much appreciated.

[@foruvasanth]

@@AngularUniversity Thanks, much appreciated.

[@malcolmswaine8983]

@@foruvasanth Yes - where is it?!!

[@malcolmswaine8983]

Good video - did you ever cover the RS256? Next video in this list kind of skips this :) Thanks for well explained content!