It's the code repository of the OWASP cheatsheet JSON Web Token (JWT) Cheat Sheet for Java.
A web page propose the creation, validation and revocation of the token, see the image below:
Get a token:
Token stored in browser session storage:
Associated user fingerprint hardened cookie issued to tackle token sidejacking:
Verification of the token:
Revocation of the token (logout):
Verification of the token indicating that the token has been revoked and is not valid anymore:
All classes are fully documented.
The project was developed with JAX-RS + Maven under IntelliJ IDEA Community Edition.
You can also use the Run Application running configuration from Intellij project.
Run the following command to create a WAR archive:
mvn clean package
Run the following command to run the prototype (application will be available on https://localhost:8443):
mvn tomcat7:run-war