{"action":"created","comment":{"url":"https://api.github.com/repos/junhwi/jwt-example/pulls/comments/93232018","pull_request_review_id":13753491,"id":93232018,"diff_hunk":"@@ -193,48 +193,47 @@ \\subsection{The Benefits of Token based method}\n \\subsection{JWT}\n JSON Web Token, or JWT in short is the new token format which JSON style claims are encoded into base64. It has a compact claims representation to be used in space-constrained environments such as HTTP Authorization headers. It is an open, industry standard RFC 7519 method for representing claims securely between two parties.\n \n-JWT consists of 3 parts, header, payload and JWS signature. Header describes the type of the token and signing algorithm of the token. Payload is where the data we want to claim is stored. The data in payload is stored in JSON format. JWS signature is where the message authentication code(MAC) of base64 encoded header and payload signed with a secret key is stored. When header, payload and JWS signature is prepared, the concatenated string of base64 encoded header, payload and JWS signature is the JWT token. Figure ~\\ref{structure} shows the structure of the JWT token.\n+JWT consists of 3 parts, JOSE header, JWT claim set and JWS signature. JOSE header describes the type of the token and signing algorithm of the token. JWT claim set is where the data we want to claim is stored. The data in JWT claim set is stored in JSON format. JWS signature is where the message authentication code(MAC) of base64 encoded JOSE header and JWT claim set signed with a secret key is stored. When JOSE header, JWT claim set and JWS signature is prepared, the concatenated string of base64 encoded JOSE header, JWT claim set and JWS signature is the JWT token. Figure ~\\ref{structure} shows the structure of the JWT token.","path":"vulnerability-jwt/template.tex","position":null,"original_position":47,"commit_id":"e395359fd1f9ec089c001a932eba08bb30f2d8dd","original_commit_id":"a761d3662f70a79d6fbb3448b51ec4bc4a560d6d","user":{"login":"junhwi","id":6300127,"avatar_url":"https://avatars.githubusercontent.com/u/6300127?v=3","gravatar_id":"","url":"https://api.github.com/users/junhwi","html_url":"https://github.com/junhwi","followers_url":"https://api.github.com/users/junhwi/followers","following_url":"https://api.github.com/users/junhwi/following{/other_user}","gists_url":"https://api.github.com/users/junhwi/gists{/gist_id}","starred_url":"https://api.github.com/users/junhwi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junhwi/subscriptions","organizations_url":"https://api.github.com/users/junhwi/orgs","repos_url":"https://api.github.com/users/junhwi/repos","events_url":"https://api.github.com/users/junhwi/events{/privacy}","received_events_url":"https://api.github.com/users/junhwi/received_events","type":"User","site_admin":false},"body":"When JOSE header, JWT claim set and JWS signature is prepared, the sequence of base64 encoded value of each parts separated by period forms the JWT.","created_at":"2016-12-20T12:59:15Z","updated_at":"2016-12-20T12:59:15Z","html_url":"https://github.com/junhwi/jwt-example/pull/11#discussion_r93232018","pull_request_url":"https://api.github.com/repos/junhwi/jwt-example/pulls/11","_links":{"self":{"href":"https://api.github.com/repos/junhwi/jwt-example/pulls/comments/93232018"},"html":{"href":"https://github.com/junhwi/jwt-example/pull/11#discussion_r93232018"},"pull_request":{"href":"https://api.github.com/repos/junhwi/jwt-example/pulls/11"}}},"pull_request":{"url":"https://api.github.com/repos/junhwi/jwt-example/pulls/11","id":98686355,"html_url":"https://github.com/junhwi/jwt-example/pull/11","diff_url":"https://github.com/junhwi/jwt-example/pull/11.diff","patch_url":"https://github.com/junhwi/jwt-example/pull/11.patch","issue_url":"https://api.github.com/repos/junhwi/jwt-example/issues/11","number":11,"state":"open","locked":false,"title":"Jwt session","user":{"login":"byou-kaist","id":24536309,"avatar_url":"https://avatars.githubusercontent.com/u/24536309?v=3","gravatar_id":"","url":"https://api.github.com/users/byou-kaist","html_url":"https://github.com/byou-kaist","followers_url":"https://api.github.com/users/byou-kaist/followers","following_url":"https://api.github.com/users/byou-kaist/following{/other_user}","gists_url":"https://api.github.com/users/byou-kaist/gists{/gist_id}","starred_url":"https://api.github.com/users/byou-kaist/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/byou-kaist/subscriptions","organizations_url":"https://api.github.com/users/byou-kaist/orgs","repos_url":"https://api.github.com/users/byou-kaist/repos","events_url":"https://api.github.com/users/byou-kaist/events{/privacy}","received_events_url":"https://api.github.com/users/byou-kaist/received_events","type":"User","site_admin":false},"body":"JWT session 추가했습니다.","created_at":"2016-12-20T04:51:10Z","updated_at":"2016-12-20T12:59:15Z","closed_at":null,"merged_at":null,"merge_commit_sha":"d5c8e4d8baff4f828860ea3da37d20950fb6136c","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/junhwi/jwt-example/pulls/11/commits","review_comments_url":"https://api.github.com/repos/junhwi/jwt-example/pulls/11/comments","review_comment_url":"https://api.github.com/repos/junhwi/jwt-example/pulls/comments{/number}","comments_url":"https://api.github.com/repos/junhwi/jwt-example/issues/11/comments","statuses_url":"https://api.github.com/repos/junhwi/jwt-example/statuses/e395359fd1f9ec089c001a932eba08bb30f2d8dd","head":{"label":"junhwi:jwt_session","ref":"jwt_session","sha":"e395359fd1f9ec089c001a932eba08bb30f2d8dd","user":{"login":"junhwi","id":6300127,"avatar_url":"https://avatars.githubusercontent.com/u/6300127?v=3","gravatar_id":"","url":"https://api.github.com/users/junhwi","html_url":"https://github.com/junhwi","followers_url":"https://api.github.com/users/junhwi/followers","following_url":"https://api.github.com/users/junhwi/following{/other_user}","gists_url":"https://api.github.com/users/junhwi/gists{/gist_id}","starred_url":"https://api.github.com/users/junhwi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junhwi/subscriptions","organizations_url":"https://api.github.com/users/junhwi/orgs","repos_url":"https://api.github.com/users/junhwi/repos","events_url":"https://api.github.com/users/junhwi/events{/privacy}","received_events_url":"https://api.github.com/users/junhwi/received_events","type":"User","site_admin":false},"repo":{"id":73990201,"name":"jwt-example","full_name":"junhwi/jwt-example","owner":{"login":"junhwi","id":6300127,"avatar_url":"https://avatars.githubusercontent.com/u/6300127?v=3","gravatar_id":"","url":"https://api.github.com/users/junhwi","html_url":"https://github.com/junhwi","followers_url":"https://api.github.com/users/junhwi/followers","following_url":"https://api.github.com/users/junhwi/following{/other_user}","gists_url":"https://api.github.com/users/junhwi/gists{/gist_id}","starred_url":"https://api.github.com/users/junhwi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junhwi/subscriptions","organizations_url":"https://api.github.com/users/junhwi/orgs","repos_url":"https://api.github.com/users/junhwi/repos","events_url":"https://api.github.com/users/junhwi/events{/privacy}","received_events_url":"https://api.github.com/users/junhwi/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/junhwi/jwt-example","description":"Examples of using jwt","fork":false,"url":"https://api.github.com/repos/junhwi/jwt-example","forks_url":"https://api.github.com/repos/junhwi/jwt-example/forks","keys_url":"https://api.github.com/repos/junhwi/jwt-example/keys{/key_id}","collaborators_url":"https://api.github.com/repos/junhwi/jwt-example/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/junhwi/jwt-example/teams","hooks_url":"https://api.github.com/repos/junhwi/jwt-example/hooks","issue_events_url":"https://api.github.com/repos/junhwi/jwt-example/issues/events{/number}","events_url":"https://api.github.com/repos/junhwi/jwt-example/events","assignees_url":"https://api.github.com/repos/junhwi/jwt-example/assignees{/user}","branches_url":"https://api.github.com/repos/junhwi/jwt-example/branches{/branch}","tags_url":"https://api.github.com/repos/junhwi/jwt-example/tags","blobs_url":"https://api.github.com/repos/junhwi/jwt-example/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/junhwi/jwt-example/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/junhwi/jwt-example/git/refs{/sha}","trees_url":"https://api.github.com/repos/junhwi/jwt-example/git/trees{/sha}","statuses_url":"https://api.github.com/repos/junhwi/jwt-example/statuses/{sha}","languages_url":"https://api.github.com/repos/junhwi/jwt-example/languages","stargazers_url":"https://api.github.com/repos/junhwi/jwt-example/stargazers","contributors_url":"https://api.github.com/repos/junhwi/jwt-example/contributors","subscribers_url":"https://api.github.com/repos/junhwi/jwt-example/subscribers","subscription_url":"https://api.github.com/repos/junhwi/jwt-example/subscription","commits_url":"https://api.github.com/repos/junhwi/jwt-example/commits{/sha}","git_commits_url":"https://api.github.com/repos/junhwi/jwt-example/git/commits{/sha}","comments_url":"https://api.github.com/repos/junhwi/jwt-example/comments{/number}","issue_comment_url":"https://api.github.com/repos/junhwi/jwt-example/issues/comments{/number}","contents_url":"https://api.github.com/repos/junhwi/jwt-example/contents/{+path}","compare_url":"https://api.github.com/repos/junhwi/jwt-example/compare/{base}...{head}","merges_url":"https://api.github.com/repos/junhwi/jwt-example/merges","archive_url":"https://api.github.com/repos/junhwi/jwt-example/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/junhwi/jwt-example/downloads","issues_url":"https://api.github.com/repos/junhwi/jwt-example/issues{/number}","pulls_url":"https://api.github.com/repos/junhwi/jwt-example/pulls{/number}","milestones_url":"https://api.github.com/repos/junhwi/jwt-example/milestones{/number}","notifications_url":"https://api.github.com/repos/junhwi/jwt-example/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/junhwi/jwt-example/labels{/name}","releases_url":"https://api.github.com/repos/junhwi/jwt-example/releases{/id}","deployments_url":"https://api.github.com/repos/junhwi/jwt-example/deployments","created_at":"2016-11-17T04:26:58Z","updated_at":"2016-12-19T07:10:47Z","pushed_at":"2016-12-20T12:57:27Z","git_url":"git://github.com/junhwi/jwt-example.git","ssh_url":"git@github.com:junhwi/jwt-example.git","clone_url":"https://github.com/junhwi/jwt-example.git","svn_url":"https://github.com/junhwi/jwt-example","homepage":null,"size":2014,"stargazers_count":0,"watchers_count":0,"language":"TeX","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":3,"forks":0,"open_issues":3,"watchers":0,"default_branch":"master"}},"base":{"label":"junhwi:master","ref":"master","sha":"a6eb32809e9d70bc9b19e194d55ee086b4b1a691","user":{"login":"junhwi","id":6300127,"avatar_url":"https://avatars.githubusercontent.com/u/6300127?v=3","gravatar_id":"","url":"https://api.github.com/users/junhwi","html_url":"https://github.com/junhwi","followers_url":"https://api.github.com/users/junhwi/followers","following_url":"https://api.github.com/users/junhwi/following{/other_user}","gists_url":"https://api.github.com/users/junhwi/gists{/gist_id}","starred_url":"https://api.github.com/users/junhwi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junhwi/subscriptions","organizations_url":"https://api.github.com/users/junhwi/orgs","repos_url":"https://api.github.com/users/junhwi/repos","events_url":"https://api.github.com/users/junhwi/events{/privacy}","received_events_url":"https://api.github.com/users/junhwi/received_events","type":"User","site_admin":false},"repo":{"id":73990201,"name":"jwt-example","full_name":"junhwi/jwt-example","owner":{"login":"junhwi","id":6300127,"avatar_url":"https://avatars.githubusercontent.com/u/6300127?v=3","gravatar_id":"","url":"https://api.github.com/users/junhwi","html_url":"https://github.com/junhwi","followers_url":"https://api.github.com/users/junhwi/followers","following_url":"https://api.github.com/users/junhwi/following{/other_user}","gists_url":"https://api.github.com/users/junhwi/gists{/gist_id}","starred_url":"https://api.github.com/users/junhwi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junhwi/subscriptions","organizations_url":"https://api.github.com/users/junhwi/orgs","repos_url":"https://api.github.com/users/junhwi/repos","events_url":"https://api.github.com/users/junhwi/events{/privacy}","received_events_url":"https://api.github.com/users/junhwi/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/junhwi/jwt-example","description":"Examples of using jwt","fork":false,"url":"https://api.github.com/repos/junhwi/jwt-example","forks_url":"https://api.github.com/repos/junhwi/jwt-example/forks","keys_url":"https://api.github.com/repos/junhwi/jwt-example/keys{/key_id}","collaborators_url":"https://api.github.com/repos/junhwi/jwt-example/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/junhwi/jwt-example/teams","hooks_url":"https://api.github.com/repos/junhwi/jwt-example/hooks","issue_events_url":"https://api.github.com/repos/junhwi/jwt-example/issues/events{/number}","events_url":"https://api.github.com/repos/junhwi/jwt-example/events","assignees_url":"https://api.github.com/repos/junhwi/jwt-example/assignees{/user}","branches_url":"https://api.github.com/repos/junhwi/jwt-example/branches{/branch}","tags_url":"https://api.github.com/repos/junhwi/jwt-example/tags","blobs_url":"https://api.github.com/repos/junhwi/jwt-example/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/junhwi/jwt-example/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/junhwi/jwt-example/git/refs{/sha}","trees_url":"https://api.github.com/repos/junhwi/jwt-example/git/trees{/sha}","statuses_url":"https://api.github.com/repos/junhwi/jwt-example/statuses/{sha}","languages_url":"https://api.github.com/repos/junhwi/jwt-example/languages","stargazers_url":"https://api.github.com/repos/junhwi/jwt-example/stargazers","contributors_url":"https://api.github.com/repos/junhwi/jwt-example/contributors","subscribers_url":"https://api.github.com/repos/junhwi/jwt-example/subscribers","subscription_url":"https://api.github.com/repos/junhwi/jwt-example/subscription","commits_url":"https://api.github.com/repos/junhwi/jwt-example/commits{/sha}","git_commits_url":"https://api.github.com/repos/junhwi/jwt-example/git/commits{/sha}","comments_url":"https://api.github.com/repos/junhwi/jwt-example/comments{/number}","issue_comment_url":"https://api.github.com/repos/junhwi/jwt-example/issues/comments{/number}","contents_url":"https://api.github.com/repos/junhwi/jwt-example/contents/{+path}","compare_url":"https://api.github.com/repos/junhwi/jwt-example/compare/{base}...{head}","merges_url":"https://api.github.com/repos/junhwi/jwt-example/merges","archive_url":"https://api.github.com/repos/junhwi/jwt-example/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/junhwi/jwt-example/downloads","issues_url":"https://api.github.com/repos/junhwi/jwt-example/issues{/number}","pulls_url":"https://api.github.com/repos/junhwi/jwt-example/pulls{/number}","milestones_url":"https://api.github.com/repos/junhwi/jwt-example/milestones{/number}","notifications_url":"https://api.github.com/repos/junhwi/jwt-example/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/junhwi/jwt-example/labels{/name}","releases_url":"https://api.github.com/repos/junhwi/jwt-example/releases{/id}","deployments_url":"https://api.github.com/repos/junhwi/jwt-example/deployments","created_at":"2016-11-17T04:26:58Z","updated_at":"2016-12-19T07:10:47Z","pushed_at":"2016-12-20T12:57:27Z","git_url":"git://github.com/junhwi/jwt-example.git","ssh_url":"git@github.com:junhwi/jwt-example.git","clone_url":"https://github.com/junhwi/jwt-example.git","svn_url":"https://github.com/junhwi/jwt-example","homepage":null,"size":2014,"stargazers_count":0,"watchers_count":0,"language":"TeX","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":3,"forks":0,"open_issues":3,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/junhwi/jwt-example/pulls/11"},"html":{"href":"https://github.com/junhwi/jwt-example/pull/11"},"issue":{"href":"https://api.github.com/repos/junhwi/jwt-example/issues/11"},"comments":{"href":"https://api.github.com/repos/junhwi/jwt-example/issues/11/comments"},"review_comments":{"href":"https://api.github.com/repos/junhwi/jwt-example/pulls/11/comments"},"review_comment":{"href":"https://api.github.com/repos/junhwi/jwt-example/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/junhwi/jwt-example/pulls/11/commits"},"statuses":{"href":"https://api.github.com/repos/junhwi/jwt-example/statuses/e395359fd1f9ec089c001a932eba08bb30f2d8dd"}}}}
{"actor":{"display_login":"junhwi"}}