JSON Web Token (JWT) 的客户端验证 (JSON Web Token (JWT) based client authentication in Message Queuing Telemetry Transport (MQTT))

This paper is an overview of JSON Web Token (JWT) and Transport Layer Security (TLS) as two primary approaches for authentication of the things on the Internet. JSON Web Token (JWT) is used extensively today for authorization and authentication within the OAuth and the OpenId framework. Recently, the Google Cloud IoT has mandated the use of JWT for both HTTP and Message Queuing Telemetry Transport (MQTT) protocol based clients connecting to the cloud service securely over TLS. MQTT is the protocol of choice in IoT devices and is the primary focus of this paper as the application protocol. Another popular cloud platform Amazon Web Service (AWS) uses the TLS mutual authentication for client authentication. Any comparison provided here between the two approaches is primarily from a constrained device client perspective.

翻译：本文概述了JSON Web Token(JWT)和TLS运输层安全(TLS)这两个在因特网上验证事物的主要方法。 JSON Web Token(JWT)今天在OAuth 和 OpenId 框架内被广泛用于授权和认证。最近, Google Cloud IoT 授权将JWT 用于HTTP 和Memail Queing Teleconomic Transport(MQTTT) 协议, 以用户安全方式连接到 TLS 上的云服务客户。 MQTT 是IoT 设备的首选协议, 也是本文的主要焦点。另一个流行的亚马逊网络服务平台使用TLS 相互认证来验证客户。这两种方法之间的任何比较,主要来自受限的客户端角度。