JWT Lifecycle
Learn the JSON Web Token lifecycle step by step, from login and signing to stateless API validation, token expiration, refresh tokens, logout, and revocation tradeoffs.
Security
Step through security protocols — TLS handshakes, certificate validation, key exchange, and encrypted communication flows.
7 guides 7 visualizations
Visualizations 7 visualizations
OAuth 2.0 & OIDC Flow Visualization
Walk through OAuth 2.0 Authorization Code and OIDC flows: redirects, consent, authorization code, PKCE verification, token exchange, API calls, state, nonce, token theft, refresh
OAuth 2.0 Auth Code Flow with PKCE
Follow the step-by-step OAuth 2.0 Authorization Code Flow with PKCE. Learn how code verifiers and SHA-256 code challenges defend Single Page Applications (SPAs) against authorization code...
SQL Injection Attack Path
Walk through the SQL Injection lifecycle with guided steps for string concatenation, parameterized query, WAF, input validation, least privilege.
TLS 1.3 vs TLS 1.2 Handshake
Compare the TLS 1.3 and TLS 1.2 handshake processes side-by-side. Understand 1-RTT negotiation, encrypted post-ServerHello messages, and forward-secret keys.
TLS Certificate Chain of Trust
Understand how browsers cryptographically validate TLS/SSL certificate chains of trust step-by-step. Learn about Leaf, Intermediate, and Root certificates, signatures, public keys
TLS Handshake
Watch the complete TLS 1.3 handshake unfold step by step. See ClientHello, ServerHello, key exchange, certificate verification, and how encrypted communication is established.