Explore >> Select a destination

You are here

 webhooks.fyi
Shared Secret - Docs
| | www.sjoerdlangkemper.nl
Attacking JWT authentication
2.7 parsecs away

Travel
| | JSON Web Tokens or JWTs are used by some web applications instead of traditional session cookies. Because of their statelessness and the signature implementation there are some security issues that are specific to JWTs. This post describes some ways you can verify that a JWT implementation is secure.
| | www.rasikjain.com
Security - Authentication Workflows
3.5 parsecs away

Travel
| | Here are three scenarios for implementing authentication workflows. Internet Applications (Public facing) For internet web applications and APIs, Session based (SessionID cookie) and Token Based (JWT) Authentication can be implemented. Session Based: Implemented for a majority of traditional and stateful web applications. Once the user is authenticated, A Session state is created and stored in an external State server or SQL database. The Session state is identified by a unique SessionID....
| | openapi.com
API Authentication: what it is, how it works and benefits
2.9 parsecs away

Travel
| | API Authentication methods: what they are, how they work and how they are used to protect sensitive application data
| | weblog.west-wind.com
Role based JWT Tokens in ASP.NET Core APIs - Rick Strahl's Web Log
15.3 parsecs away

Travel
| ASP.NET Core Authentication and Authorization continues to be the most filddly part of the ASP.NET Core eco system and today I ran into a problem to properly configure JWT Tokens with Roles. As I had a hard time finding the information I needed in one place and instead ended up with some outdated information, I'm writing up a post to hopefully put all the basic bits into this single post.