Questions tagged [tokens]
The tokens tag has no summary.
10 questions
1
vote
1
answer
300
views
Local storage or HTTP Only Cookie for RefreshToken?
By saving the RefreshToken in an HTTP-only cookie it cannot be accessed or manipulated by JavaScript, but will be sent with each request with a greater risk of being intercepted.
When saving the ...
- 19
2
votes
3
answers
1k
views
Race condition when issuing a refresh token: worth addressing or not?
I'm quite new to the world of access and refresh tokens, so bear with me.
Client uses its refresh token to get a new access token.
The server invalidates the just used refresh token and contextually ...
- 125
1
vote
4
answers
752
views
How exactly is the cancellation token mechanism implemented over HTTP?
In a web application with a frontend and a backend part, how exactly is the cancellation token mechanism implemented over HTTP? HTTP is a stateless protocol and it does not allow "sharing" ...
- 177
1
vote
0
answers
642
views
What goes in the access_token and what goes in the id_token?
I'm currently trying to build a very simple application for handling OpenID Connect using the library Openiddict. This library lets me construct the access_token and the id_token and lets me set which ...
- 313
0
votes
2
answers
174
views
OAuth Client Credentials Security Concern
I have a scenario I am considering, and I don't quite find out what's the best solution with OAuth. Hopefully I can learn good things here.
We are company A and we specialize in managing secure text ...
- 407
1
vote
3
answers
870
views
What are the advantages of refresh token?
A good auth system contains access and refresh tokens. I know what access-tokens are for and I know what refresh tokens DO - but I don't understand their meaning.
For example:
If I authenticate myself ...
- 41
0
votes
1
answer
1k
views
Refresh Token Storage on cloud best practice?
Background
I am building a web app that allows the user to integrate with multiple services like Google, Twitter, Github etc. using OAuth2.0.
Currently, I retrieve the refresh token on sign-in to ...
- 101
15
votes
3
answers
4k
views
How would you test a lexer?
I'm wondering how to effectively test a lexer (tokenizer).
The number of combinations of tokens in a source file can be huge, and the only way I've found is to make a batch of representative source ...
- 453
1
vote
1
answer
2k
views
Token based authentication to multiple API servers
We have a Web server (which also does authentication and authorization) that manages, via an API, one or more servers that contain highly sensitive data. In the below architecture diagram, we manage ...
- 493
-2
votes
1
answer
236
views
Is there a common agreed upon token symbol used in computer science or common across languages?
I have seen tokens like this:
var message = "Hello, {Name}";
and like this:
var message = "Hello, ${name}";
and like this:
var message = "Hello, @NAME";
and a few ...
- 1,247