Securing Your Go REST APIs with JSON Web Tokens(JWTS)

● SUBSCRIBE to see more of my Videos & hit that LIKE button to support the channel!

In this tutorial, we’ll be looking at exactly what it takes to build a secure Go-based REST API that uses JSON Web Tokens to communicate!

‎--------------

🎥 Recording Setup

[Tutorialedge]

This covers everything from project setup and layout, testing, and best practices around things like versioning.

[matt-klausmushi]

This is perfect! I enjoyed every bit of it. Please, keep it up! Cheers!

[lauradohina]

Great tutorial ! but could you make video how to secure REST API using "OAuth2 " authentication

[roblesrt]

Followed the steps and still works like a charm!

[Maxiride]

No fuss and crystal clear, great video!

[christsantiris]

Nice work. I'd love to see a part 2 that replaces the hard coded secret

[omartahboub]

Nice Tutorial, I would split it into 2 videos !

[mukulverma]

thanks for the tutorial sir, but please try to explain line by line code like why we use token.Claims.(jwt.MapClaims)
it return map[string]interface{}, please try to explain every code bit by bit.

[pokegaiyui]

Any recommendations on how we would approach refreshing the token?

[dineshgupta]

Excellent !!! Awesome, I understand how JWT is working. Thanks!!!

[randycoburn]

Nice video and thanks for making it. I have watched a few of your videos and would like to point out the bad habit that you are teaching people so that you can try to avoid it in the future. Many of your if statements that handle errors simply print the error and then continue on. This causes problems as your error statement is checking if values are set for future work in the code path. Without a return or some form of exit or handling you will just get a wave of errors or worse unauthorised access because you checked the values and then didn't exit.

[me]

Great video! Thanks. Can you please share info on how we can validate a PoP token using Go?

[abhinavsingh]

Awesome dude! Keep up the good work :)

[korbkrys]

How do you decode the jwt and access the claims?

[vladixus]

I just have some problems, I downloaded and imported JWT lib, but some functions like jwt.Parse or jwt.NewWithClaims are not working, they just like "Unresolved reference", and there are also errors in the root folder of the downloaded library

[EnitinEnitin]

There is no way to access the tokens information from the handler. It's only accessible in your auth middleware.

[lashbash]

came for golang, stayed for the accent

[gcstang]

Great tutorial! If you wanted the client to be a browser would you just pass in a login endpoint and if there is no token direct them to the login or is there a different pattern for that kind of workflow?

[zaqqoZeq]

Please don't be lazy about handling errors. A lot of people use this to learn Go and might be confused about what the best practices are.

[AdrianLabs]

Great tutorial, thank you! Question, at 7:48 would the os.get variable be compatible just like that or should we put it inside the byte array as the text string you used as key before?