Summary 2020/11/18 - Session 18

[clarkio]

Catch recordings of these streams in the YouTube playlist

Links of the Day!

• Microsoft Accessibility Fundamentals
• Reddit Question
• Guido joins Microsoft
• Python Enumerate - RealPython

Recap from last session:
Learned more about FastAPI and security features
- Summary of last session

Item 1: Goal for today's session

• Learn about JWTs and more FastAPI

Item 2: What we did

• Looked at the structure of a JSON Web Token (JWT)
  • Went to https://jwt.io to get a more visual understanding of the structure
• FastAPI documentation on creating JWTs with the python-jose library

Item 3: Something we learned

• JWTs have 3 parts to them: a header, a payload and a signature
• The header and payload are base64 encoded which is fine but keep in mind it's not a secure way of hiding the data so be sure not to put sensitive information in the payload when using the HS256 algorithm in JWTs
• Storing access tokens in session storage vs. a cookie
• Using reference ID's to be used for referencing corresponding data instead of transferring all the data in a request
• What is a "seed" and how is it used?
  • It's a unique value to you/your app/system that can be used to generate randomness

Item 4: Other Discussion

• Different front-end frameworks: Angular, React, Vue, Nestjs, nextjs, nuxtjs
• jq tool

Next Session

• (Tentatively) November 25, 2020
• Implement the use of JWT in FastAPI