Questions tagged [jwt]
JSON Web Token (JWT, pronounced "jot") is an emerging type of token-based authentication used in space-constrained environments such as HTTP Authorization headers.
32 questions
1
vote
0
answers
29
views
SvelteKit authentication hook with token refresh and request deduplication
I've implemented a SvelteKit handleFetch hook that manages authentication for API requests with automatic token refresh. The API provides a 15-second grace period where a refresh token remains valid ...
- 433
2
votes
1
answer
77
views
Any possible issues with my approach to Access Management where I'm associating the list of Departments with the User class?
I have a spring boot project with JWT being used for Spring Security. I want to implement Access Management in my project and I'm using this approach. In my project, whenever a user is created, a list ...
- 23
0
votes
1
answer
166
views
Code that checks whether there is a holiday by calling another microservice
I call another microservice to check whether there is any holiday on any particular day. This will then add a comment in the db if the rest call doesn't fetch an empty list(a list of size 1).
Here is ...
- 9
3
votes
0
answers
111
views
Building an API for an e-commerce system to allow third party software to import products
I am working on an e-commerce website called Shopless, which is similar to E-bay/Gumtree. Our website integrates with other DMS systems, in order to allow organisations to import products into our ...
- 633
2
votes
2
answers
536
views
Decrypt incoming HTTP request headers
During each HTTP request incoming from my Angular front-end I send encrypted pair of access & refresh token. On the back-end ASP.NET web APIs are used.
The way I decrypt them currently is by ...
- 21
4
votes
0
answers
3k
views
Reactive JWT authentication using Spring webflux
Greeting to all senior devs here. I'm trying to create a project for my small business. There are not many tutorial on how to create Reactive JWT authentication with Spring webflux. So I'm a bit ...
- 341
3
votes
1
answer
579
views
User registration and login service using JWT
I have created service to communicate with my backend for user registration and login. I use the JS fetch API and send all data through HTTPS. I use JWT tokens to authenticate queries once I have ...
- 133
1
vote
1
answer
130
views
Making my login function more readable and maintainable
I recently wrote a login function in my express application that does the following:
Verifies the user's email and password are correct
Generates a JWT Access Token with a short expiry date, and then ...
- 13
3
votes
1
answer
126
views
PHP JWT management base library for inclusion in larger projects
Edit: this is a base library for including in larger projects for the overall management of JSON Web Tokens (JWT) that should be compatible with other JWT libraries that share an encryption secret - ...
- 133
2
votes
0
answers
207
views
ASP.Net Core WebAPI Authorization Policy for User or Admin [closed]
I have a controller that returns data about users. I want to set the authorization such that an admin can access this controller and retrieve data for any user, and a non-admin user can access the ...
- 129
2
votes
1
answer
254
views
SSO login & authenticate Wordpress users with JWT token
I'm in the midst of exploring SSO with JWT & Wordpress, I'm not too sure if it's a good practice or does this setup/flow have any security vulnerabilities.
Currently JWT/SSO method i'm using is ...
- 121
4
votes
0
answers
430
views
Get current user middleware from JWT using express
I'm using Sequelize and Google oAuth for authentication, I want to create a middleware that
Verifies the sent token passed in the headers matches the one the user was initially signed to.
Finds the ...
- 141
1
vote
1
answer
2k
views
Expiring JWT tokens in Flask
I've been using flask-jwt-extended for my application and one of the problems I had was logging a session out and making sure the token is not usable anymore.
I've ...
- 17.5k
7
votes
1
answer
735
views
JWT Authentication Service
Recently I've built a service at my work to generate tokens with JWT (JSON Web Token) "protocol", I would like to show you the code and to get comments from you if that's good enough and if there are ...
- 173
4
votes
2
answers
2k
views
JWT authentication between Django and ReactJS
I am currently using Django (2.1) to build an API, and I have added djangorestframework-jwt to manage JWT.
Here is the configuration:
...
- 43