Questions tagged [jwt]
JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties.
78 questions
3 votes
2 answers
220 views
Where should I store the access token in React?
I'm building a web app using Spring Boot (backend) and React (frontend). My authentication is based on JWT, with both access token and refresh token. The refresh token is stored in an HTTP-only ...
1 vote
1 answer
102 views
What type of authentication/identification is needed?
The specs: Mobile apps LLM wrapper (of e.g. OpenAI API) The chat history will be stored on the client Backend is needed to manage the api key and to track token consumption / payment (how many tokens ...
- 391
0 votes
0 answers
103 views
Edge Case For Cookie Based Token Management
I have a React frontend and a Nodejs backend that uses authentication via an OIDC service provider. After a user goes through the SSO authentication flow I store the token (containing a refresh token ...
- 9
1 vote
0 answers
76 views
Best design pattern for integrating Google OAuth with existing JWT token-based authentication system
We currently have a backend authentication mechanism in place that utilizes JWT tokens. Users sign in or sign up using email and password, and upon successful authentication, the backend issues JWT ...
1 vote
0 answers
108 views
Architecture Design using Queue and JWT Token for session management
I am planning to design a microservice system architecture for a ticketing platform. It will be similar to "TicketMaster". Here is the flow of my architecture: client web browser API ...
- 11
0 votes
0 answers
223 views
JWT Cookie and API Gateway
Background I have an authentication microservice that handles the user authentication and returns 2 JWT cookies (access_token and refresh_token). I want to incorporate an API gateway that does the JWS ...
- 9
0 votes
0 answers
145 views
How to handle Authorized & Non-Authorized Routes in Microservices with Tokens
Context Suppose there is a e-commerce microservice architecture with the format: In summary, a client will contact the Auth Service / Identity Service to receive a token. It passes the token to the ...
- 101
0 votes
1 answer
867 views
Understanding the JWT and refresh token approach
I've read a few articles which cover the set up for refresh tokens and JWT tokens Is there a best practice in how/when to get the next JWT token. In my head, there are a few different approaches. I ...
- 1,881