Skip to end of metadata
Go to start of metadata

JSON stands for JavaScript Object Notation.  It is one of the popular formats for web programming. It is the preferred data format for REST architecture style applications.

Securing JSON Applications

There are a collection of specification drafts currently being standardized at the IETF. Collectively, these are called JOSE (JavaScript Object Signing And Encryption).

Additionally under the IETF OAuth2 specification family, there is JWT (JSON Web Token) draft.

PicketBox Core provides an implementation for these specifications. It should enable users to receive secure JSON messages as well as transmit secure JSON messages.  Irrespective of whether your client is a mobile device (native or html5 apps) or a browser application, you can always write server side programs using PicketBox core JSON security.

JSON Web Token (JWT)

This forms the basic JSON Structure for security.

JSON Web Signature (JWS)

JWS is used to sign JSON messages.

You will need access to the recipients's Public Key while encrypting a JSON message.

JSON Web Encryption (JWE)

JWE is used to encrypt/decrypt JSON messages.

Code Examples

Labels:
json json Delete
jose jose Delete
jwt jwt Delete
json_signature json_signature Delete
json_encryption json_encryption Delete
rest rest Delete
rest_security rest_security Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.