Javascript Object Signing and Encryption (JOSE)
  • is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

JOSE Suite

JSON Web Token (JWT)

  • is a JSON object containing a claim, which is to be transferred between parties
  • usually used in conjunction with OAuth/OIDC
Link to original

JSON Web Key (JWK)

  • JSON Web Key (JWK) - a JSON object that contains a cryptographic key that is used to verify the signature of a JWT issued by the STS
  • JSON Web Key Set (JWKS) - a JSON object containing a SET of JWKs
Link to original

JSON Web Key Set (JWKS)

JSON Web Algorithms (JWA)

  • are cryptographic algorithms and identifiers to be used with: JWT & JWK
Link to original

Security Tokens Service (STS)

Link to original

Putting it All Together

Code Frameworks