The repository administrator has not yet configured an RDF license.
STUDI KOMPARASI KINERJA DAN KEAMANAN JSON WEB TOKEN (JWT) DAN PLATFORM AGNOSTIC SECURITY TOKENS (PASETO) PADA RESTful API APLIKASI PASAR MURAH
Authentication is a crucial aspect in maintaining the security of user data within a system. This study aims to compare two authentication protocols, JSON Web Token (JWT) and Platform Agnostic Security Tokens (PASETO), implemented on the RESTful API of the Pasar Murah Application. The research method uses a quantitative approach by conducting performance and security testing for each protocol. The test results show that JWT has better performance than PASETO. The average token generation time for JWT is recorded at 1.68 ms, while PASETO requires 2.35 ms. The token transfer time for JWT is 31.62 ms, while PASETO takes 35.94 ms. In terms of size, the JWT token is 809 bytes, whereas the PASETO token is slightly larger at 839 bytes. However, in terms of security, PASETO demonstrates greater strength. Based on the security testing results, the JWT token is considered secure against several types of attacks listed in the Top 3 OWASP API Security 2023, such as Broken Authentication, Broken Object Level Authorization , Broken Object Property Level Authorization. However, JWT remains vulnerable to Broken User Authentication threats. In contrast, PASETO shows stronger resistance, successfully withstanding all three types of attacks without exposing any vulnerabilities.
FAKULTAS SAINS DAN TEKNOLOGI, UIN SUNAN KALIJAGA YOGYAKARTA
STUDI KOMPARASI KINERJA DAN KEAMANAN JSON WEB TOKEN (JWT) DAN PLATFORM AGNOSTIC SECURITY TOKENS (PASETO) PADA RESTful API APLIKASI PASAR MURAH (Text)
STUDI KOMPARASI KINERJA DAN KEAMANAN JSON WEB TOKEN (JWT) DAN PLATFORM AGNOSTIC SECURITY TOKENS (PASETO) PADA RESTful API APLIKASI PASAR MURAH (Other)
HTML Summary of #72935 STUDI KOMPARASI KINERJA DAN KEAMANAN JSON WEB TOKEN (JWT) DAN PLATFORM AGNOSTIC SECURITY TOKENS (PASETO) PADA RESTful API APLIKASI PASAR MURAH