{"version":"1.0","provider_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","provider_url":"https:\/\/fatihsoysal.com\/blog","author_name":"Fatih Soysal","author_url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/","title":"Geli\u015fmi\u015f JWT \u0130stismar Teknikleri: Temelleri A\u015fmak","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"VjGdNIttvp\"><a href=\"https:\/\/fatihsoysal.com\/blog\/gelismis-jwt-istismar-teknikleri-temelleri-asmak\/\">Geli\u015fmi\u015f JWT \u0130stismar Teknikleri: Temelleri A\u015fmak<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/fatihsoysal.com\/blog\/gelismis-jwt-istismar-teknikleri-temelleri-asmak\/embed\/#?secret=VjGdNIttvp\" width=\"600\" height=\"338\" title=\"&#8220;Geli\u015fmi\u015f JWT \u0130stismar Teknikleri: Temelleri A\u015fmak&#8221; &#8212; Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" data-secret=\"VjGdNIttvp\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n<\/script>\n","description":"JWT'ler (JSON Web Token), bug\u00fcn web uygulamalar\u0131nda kimlik do\u011frulama ve yetkilendirme i\u00e7in yayg\u0131n olarak kullan\u0131lan bir standartt\u0131r. Basitlikleri ve esneklikleri nedeniyle pop\u00fclerdirler ancak do\u011fru \u015fekilde uygulanmazlarsa ciddi g\u00fcvenlik riskleri olu\u015fturabilirler. Bu makalede, temel JWT istismar tekniklerinin \u00f6tesine ge\u00e7en ve ger\u00e7ek d\u00fcnyadaki sald\u0131r\u0131lar\u0131 nas\u0131l ger\u00e7ekle\u015ftirebilece\u011finizi g\u00f6steren baz\u0131 geli\u015fmi\u015f teknikleri ele alaca\u011f\u0131z."}