Adéla Haníková: To use or not to use JWT

JSON Web Tokens (JWT) are a popular choice for modern web applications, offering a compact and self-contained way to transmit claims between parties. However, their use comes with challenges that can impact security and usability. These challenges stem from the design of JWT, which does not completely align with classical session handling. In this talk, we will focus on these issues and discuss how to address them according to official OWASP materials.
Captivated by the story of Enigma Adéla started her studies of mathematics with focus on information security. She discovered Capture the Flag competitions during the studies and found a great interest in that. After graduation she figured out that you can look for vulnerabilities and make a living out of it. It has been already nine years since she has been working as a penetration tester in Czech company ARICOMA.