Securing APIs with JWTs
By Mark Rudolph • February 24, 2026
As mentioned in my [previous post](/2026/02/19/open-apps-with-pocket-id), I'm planning to roll out some demo web applications leveraging a self-hosted "third party" Open ID Connect identity server (Pocket ID). I've set up a short url to host these at: `altx10.dev`, with the idea being that each one will be deployed to `{app}.altx10.dev`. These applications will be independent of each other, but with a centralized login. In order to secure parts of the apps, we will use JSON Web Tokens.