Questions tagged [jwt]
JSON Web Token (JWT, pronounced "jot") is an emerging type of token-based authentication used in space-constrained environments such as HTTP Authorization headers.
31 questions
2
votes
1
answer
57
views
Any possible issues with my approach to Access Management where I'm associating the list of Departments with the User class?
I have a spring boot project with JWT being used for Spring Security. I want to implement Access Management in my project and I'm using this approach. In my project, whenever a user is created, a list ...
0
votes
1
answer
150
views
Code that checks whether there is a holiday by calling another microservice
I call another microservice to check whether there is any holiday on any particular day. This will then add a comment in the db if the rest call doesn't fetch an empty list(a list of size 1).
Here is ...
3
votes
0
answers
100
views
Building an API for an e-commerce system to allow third party software to import products
I am working on an e-commerce website called Shopless, which is similar to E-bay/Gumtree. Our website integrates with other DMS systems, in order to allow organisations to import products into our ...
2
votes
2
answers
504
views
Decrypt incoming HTTP request headers
During each HTTP request incoming from my Angular front-end I send encrypted pair of access & refresh token. On the back-end ASP.NET web APIs are used.
The way I decrypt them currently is by ...
4
votes
0
answers
3k
views
Reactive JWT authentication using Spring webflux
Greeting to all senior devs here. I'm trying to create a project for my small business. There are not many tutorial on how to create Reactive JWT authentication with Spring webflux. So I'm a bit ...
3
votes
1
answer
561
views
User registration and login service using JWT
I have created service to communicate with my backend for user registration and login. I use the JS fetch API and send all data through HTTPS. I use JWT tokens to authenticate queries once I have ...
1
vote
1
answer
85
views
Making my login function more readable and maintainable
I recently wrote a login function in my express application that does the following:
Verifies the user's email and password are correct
Generates a JWT Access Token with a short expiry date, and then ...
2
votes
1
answer
94
views
PHP JWT management base library for inclusion in larger projects
Edit: this is a base library for including in larger projects for the overall management of JSON Web Tokens (JWT) that should be compatible with other JWT libraries that share an encryption secret - ...
2
votes
0
answers
188
views
ASP.Net Core WebAPI Authorization Policy for User or Admin [closed]
I have a controller that returns data about users. I want to set the authorization such that an admin can access this controller and retrieve data for any user, and a non-admin user can access the ...
2
votes
1
answer
241
views
SSO login & authenticate Wordpress users with JWT token
I'm in the midst of exploring SSO with JWT & Wordpress, I'm not too sure if it's a good practice or does this setup/flow have any security vulnerabilities.
Currently JWT/SSO method i'm using is ...
4
votes
0
answers
413
views
Get current user middleware from JWT using express
I'm using Sequelize and Google oAuth for authentication, I want to create a middleware that
Verifies the sent token passed in the headers matches the one the user was initially signed to.
Finds the ...
1
vote
1
answer
2k
views
Expiring JWT tokens in Flask
I've been using flask-jwt-extended for my application and one of the problems I had was logging a session out and making sure the token is not usable anymore.
I've ...
7
votes
1
answer
706
views
JWT Authentication Service
Recently I've built a service at my work to generate tokens with JWT (JSON Web Token) "protocol", I would like to show you the code and to get comments from you if that's good enough and if there are ...
3
votes
2
answers
2k
views
JWT authentication between Django and ReactJS
I am currently using Django (2.1) to build an API, and I have added djangorestframework-jwt to manage JWT.
Here is the configuration:
...
2
votes
1
answer
1k
views
Create annotation to validate JWT in Spring controller instead of filter
I developed a Spring RESTful service that uses a JWT for authorization.
To the validity of this JWT, i used two different implementations.
Create a filter to intercept every request and validate ...