Talk is about the JWT Authentication with Django which plays an important role in modern day application development where it is a lot more than just the login screen, People will get know about different ways of authentication and authorization, concepts that make up modern identity. Authentication is one of the big parts of every application. Security is always something that is changing and evolving. We’re using the same authentication methods from the dawn of the web. Unfortunately, passwords are increasingly broken. In this talk i will discuss about the JWT Authentication with Django which plays an important role in modern day application development where it is a lot more than just the login screen, People will get know about different ways of authentication and authorization, concepts that make up modern identity and how they can integrate with any particular language or stack and how they can use JSON Web Tokens to add both Authentication and Authorization to our functions which is important for us to be secure.

1. JWT Authentication
with DJango

2. Who AM I
Viral Parmar
Founder Infinite Defense Foundation
Founder of ComExpo Cyber Security
Cyber Security Researcher
Mozilla Reps, Mozilla Foundation
Mentor, Mozilla Open Leadership
Given more then 150 seminar’s and workshop.
Always remember: Know hAckiNG, but no HaCKing.
@viralparmarhack

3. Todays Agenda
o Common Vulnerabilities
o Authentication & Authorization
o Serverless
o JWT
o Django
o JWT authentication with Django

4. Common Web Security Vulnerabilities
● Exposing Sensitive Data
● Broken Authentication
● Security Misconfiguration
● Injection Vulnerability

5. Overcome Security Vulnerabilitiesern
Identity ?
● Authentication
● Authorization
● Security
● Personalization

6. Authentication
➔ Traditional Username and Password
➔ Social login via Facebook,Twitter, Google , etc.
➔ Enterprise Federation and Single Sign On
➔ Passwordless

7. Traditional
Username and
Password
● Most Common
● Easy to Implement
● Least Secure

8. Social Login
● Common
● Medium Difficulty
● More secure

9. Single Sign On
● Most Common in
Enterprise
● Difficult to Implement
● Solve Authorization
use cases

10. Passwordless
● Rare / Upcoming
● Easy to Implement
● Very secure

11. Authorization
➔ Ensure the user has the right access at the right time
➔ Grant, Change and Revoke access

15. viralparmar.com

17. viralparmar.com

68. Any Questions

69. Contact Me
in.linkedin.com/in/viralparmarhacker
veerskyfire@protonmail.com
facebook.com/viralparmarhacker
twitter.com/viralparmarhack
Stay Connected
Stay Safe
+91 8980808222
Thank You

70. #LogOutNow