Skip to content

Commit 27e2afd

Browse files
committed
feat: edit JWT
1 parent aeaeafd commit 27e2afd

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

content/waf/policies/jwt-protection.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,15 +6,14 @@ nd-content-type: reference
66
nd-product: NAP-WAF
77
---
88

9-
JSON Web Token (JWT) is a compact and self-contained way to represent information between two parties in JSON format, commonly used for authentication and authorization.
10-
F5 WAF for NGINX validates the authenticity and well-formedness of JWTs, denying access when validation fails. JWT is mainly used for API access.
9+
JSON Web Tokens (JWTs) are a compact and self-contained way to represent information between two parties in JSON format, commonly used for authentication and authorization.
10+
F5 WAF for NGINX validates the authenticity and well-formedness of JWTs, denying access when validation fails. JWTs are mainly used for API access.
1111

1212
When a user logs in to an application, they might receive a JWT, which is then included in subsequent requests.
1313
The server validates the JWT to ensure the user is authorized to access the requested resources.
1414

1515
F5 WAF for NGINX handles tokens on behalf of the application by:
1616

17-
1817
1. Validating the token's existence and structure for specific URLs.
1918
1. Verifying the token's signature using provisioned certificates.
2019
1. Checking the token validity period (`nbf`, `exp`).

0 commit comments

Comments
 (0)