JSON Web Token (JWT, pronounced "jot") is an emerging type of token-based authentication used in space-constrained environments such as HTTP Authorization headers.

learn more… | top users | synonyms

0
votes
1answer
37 views

Simple login using ReactJS

I have successfully implemented a simple login page using ReactJS by coding it all in JavaScript (a flexibility that I like) but I am still a beginner in React and would like to know whether this is ...
0
votes
2answers
58 views

Logging in with multiple types of info

I'm trying to let users log in with multiple columns (e.g. ID, email, phone). If one fails, it checks the next column. I would like to minimise my if and ...
7
votes
1answer
251 views

OAuth2 Implementation

I am trying to implement an OAuth2 service. I am not planning to use it anytime soon (like will write unit tests). This is my fun project I do to practice. I have used the python_jwt library to create ...
1
vote
0answers
1k views

JWT - Simple API example

I have created this fake API just because I want to learn how to use JWT. It is a simple unsigned token exchange with two methods call: login and adminPassword. I've used https://github.com/lcobucci/...
1
vote
0answers
545 views

JWT with Firebase php-jwt

So my web app requires JWT authentication and I decided to make a mockup wrapper class for php-jwt before implementing it into my web app: ...
1
vote
1answer
54 views

Generic JWT Handler

I'm developing a Go REST service that uses JWT (JSON Web Tokens) for authentication. I've written a JWTHandler which validates the token using a Validation Handler. If validation succeeds, the ...
3
votes
0answers
472 views

Web API 2 - JWT with X509 certificate

I got my JWT generation working with X509 and wanted to ask if you would recommend any changes in respect to: Signing certificate storing / handling. Publishing for anonymous access public key ...
3
votes
1answer
3k views

Authentication with JWT

Please review my code for 'JWT' authentication. Are there any security issues? Where should I store the secret's key, DB or InMemory? What's a good 'JWT' Lifetime? Should I send the 'JWT' in Header ...
12
votes
1answer
15k views

Web API 2 authentication with JWT

Please review my code for bearer token (JWT) authentication of Web API 2 (Self Hosted using OWIN) Are there any security issues in the implementation? Quick overview: Token creation and validation ...