Questions tagged as 'jwt'

1
answer

Json Web Token (JWT) in Node.js with express

I am working with the Javascript Json Web Token library, where I create the token with the function: var token = jwt.sign({data: 'foobar', 'secret', { expiresIn: 60 * 60 }); To verify my usage token, the function: jwt.verify(token, 'shh...
asked by 13.07.2018 / 21:15
1
answer

It is safe to save a jwt token in LocalStorage

I have a react-app and I store the token jwt in localStorage. I have been researching and some recommend using sessions. My question is what risks I run. Anyone could use the token and generate calls to my Apis.     
asked by 21.03.2018 / 17:08
1
answer

Send token Jwt from php

I am developing an OpenId integration from php and I have to send a jwt token to an endpoint. I use Jwt firebase to generate and validate the jwt: $key = 'xxxx'; $data = array( "tenantId" => self::TENANT_ID, "clientId" => sel...
asked by 06.10.2016 / 22:06
1
answer

What is the difference between JWT and Oauth 2.0 for the authentication of requests to an Api REST? [closed]

I want to implement the authentication of the requests to my REST API that will be consumed from a mobile application. I still have not decided on JWT or Oauth 2.0, which they recommend me.     
asked by 03.03.2017 / 00:58
1
answer

It is possible to use Json Web Token without installing with composer

Very good, I would like to be able to use JWT without installing it with composer, I have seen that a colleague has been able to call the libraries with require_once, the fact is that when I want to use $jwt = JWT::encode($token, $key);...
asked by 26.09.2017 / 18:29
1
answer

Role management in Angular 4+ routes (JWT)

I would like to know what is the best way to handle user roles in Angular? The scenario is as follows: I have an application in Angular that consumes a REST API made with Laravel, the same one that gives me a token. The application will handl...
asked by 08.08.2018 / 07:07
0
answers

Micro Framework Lumen - Security Token

I have created an api rest in Lumen , I have already uploaded it to my hosting and everything works perfectly. The issue is that it has no security, I mean it does not have a "session" so to speak when they log in, I've been researching and I f...
asked by 18.08.2017 / 06:36
1
answer

Firebase Custom Auth - signInWithCustomToken creates the user without Email

I am using the Firebase Custom Authentication System for an app that I am developing with Ionic (v1) and I use Laravel 5.2 as an Auth backend. When a new user registers, they generate a token with laravel (using firebase / php-jwt) and return it...
asked by 04.02.2017 / 17:39
1
answer

Authenticate user and send notifications with Firebase

I am working with a webservice rest in java in which the users access the data of a base de datos mysql , the authentication was done with JWT . Then, looking for how to send the notifications I stumbled upon Fire...
asked by 23.08.2016 / 00:42
2
answers

Destroy a JWT token

Good, does anyone know how it is possible to destroy a token in NodeJS? I'm pressing JWT to do a reset password, then I send a url to the user with a token, the system checks the token using jwt.verify() and if it is correct it performs t...
asked by 31.01.2017 / 22:44