Questions tagged [jwt]
JSON Web Token (JWT, pronounced "jot") is a type of token-based authentication used in space-constrained environments such as HTTP Authorization headers. Use this tag for questions relating to the configuration, generation and usage of JWTs in your code.
15,492
questions
0
votes
0
answers
10
views
Is there jwt authentication for aiohttp?
I have django backend with JWT authentication and want to work on client side using aiohttp. I didn't found any ready-made implementations. All I found is aiohttp-jwt, which used on server side. For ...
0
votes
0
answers
15
views
How can Refresh token after update request?
I work with express and vue 3, store.
I don't understand the function of a refresh token.
I am a student.
I want to know the right methods to adopt.
I'm having trouble putting together a case.
I'm ...
0
votes
0
answers
13
views
jsonwebtoken in Pentaho PDI
I am trying to run this code in Modified JavaScript value step from PENTAHO to generate a token which will be used to access information by API. I am new with JS and also pentaho so idk why it keeps ...
0
votes
0
answers
21
views
Deriving a Web Crypto asymmetric key from user password
I am developing a web application where users must have asymmetric key pairs. There is no backend storage, and I want users to be able to transfer their keys to other devices without having to ...
0
votes
0
answers
19
views
Automated JWT API Troubleshooting
I'm trying to programmatically use an API that isn't necessarily open to the public. I've taken my iPhone and intercepted the traffic to watch the traffic to and from and have managed to ALMOST get it ...
-1
votes
1
answer
18
views
The type WebSecurityConfigurerAdapter is deprecated
I'm working on a project and my problem is the WebSecurityConfigurerAdapter. It's doesn't work. It's say "The type WebSecurityConfigurerAdapter is deprecated" do you know why?
Can you help ...
1
vote
0
answers
24
views
In Azure Active Directory App Registration Api Permissions, how do we enable the adding user_impersonation?
We have multiple microservices, some of which need to talk to each other without human interaction, and some of which require App Roles in order to grant access.
Instead of using the Resource Owner ...
0
votes
0
answers
7
views
How to generate JWT token after login a user. and how to pass it through controller in slim slim framework 3?
I am using Slim Framework 3 for slim REST API and I want to secure it with JWT Token. but i can't can't get that secret key on my controller any one know how to do that.
json
"slim/slim&...
1
vote
0
answers
17
views
Getting invalid algorithm error even though i have instructed jwr to use HS256 and have provided him with a Secret
I read other posts and the solution was to change the algorithm to HS256 and provide it with a secret.I didint work for me. I still get the error .I have other projects with the same setup but this ...
0
votes
0
answers
7
views
Calling App Store Server API Get All Subscription Statuses production url always returns 401
I'm having a problem with communication between my backend server (written in net 6.0) and App Store Server API.
After finishing all related setups (setting up an API key, creating JWT), when calling ...
0
votes
0
answers
4
views
php jwt-framework jwt token issue - openssl_sign(): supplied key param cannot be coerced into a private key
I am trying to build a web-token with the php framework web-token/jwt-framework ( https://github.com/web-token/jwt-framework )
jwt creation brings up the following error:
openssl_sign(): supplied key ...
-2
votes
0
answers
13
views
JWT no refresh token [closed]
so basically i need to create an authentication using JWT with a provided rest api (so I need to make only the connections) but in the requirements of the project it is specified that when the login ...
0
votes
0
answers
32
views
How can I change the 'typ' of a token provided by Azure AD?
I have a project setup like this:
React frontend
-> authenticates against...
Identity Server
-> which redirects to...
A Microsoft login
I'm using a Clients Credential Provider and it works great ...
-3
votes
0
answers
17
views
JSON Web Tokens (jwt) verify in Nodejs
In Nodejs, there give three parameters in verify JSON Web Tokens(verifyJWT) function, such as request, response and next. what is the purpose of next parameter?
0
votes
0
answers
19
views
How to get a user token (not the logged user's) by their id in Nestjs?
So I am using NestJs framework and now want to login say as an ADMIN and pass the id of a normal USER and get their jwt token (so to invalidate it). I tried with jwt.sign and pass the user's payload, ...
0
votes
0
answers
22
views
How are JWT refresh tokens meant to be sent from the client to the backend?
It is my understanding that, as someone that has recently started using JSON web tokens that, once an access token expires, a new one may be generated using a refresh token.
I currently have some ...
-1
votes
0
answers
22
views
Upload file with Java Spring Boot and Angular js and Jwt Token [closed]
I am in trouble with JWT java security and Upload file through Angular and Spring Boot. Has anyone help me out by discord? it is very small project. Could you give me the discord link?
-2
votes
0
answers
19
views
User gets logged out after page refresh | Angular and spring boot application
I'm working on management web application using spring boot for the backend and angular for the frontend.
When I logged in as an assistant (or any other role) with correct credentials I get redirected ...
4
votes
1
answer
34
views
FastAPI auth check before granting access to sub-applications
I am mounting a Flask app as a sub-application in my root FastAPI app, as explained in the documentation
Now I want to add an authentication layer using HTTPAuthorizationCredentials dependency, as ...
0
votes
0
answers
19
views
JWT Authentication with Swagger .NET Core 6
I am trying to develop an application. For Authentication I am using JWT Token. I have successfully created token. And using Postman I can authenticated. But Swagger I did whatever I should do but, It ...
0
votes
1
answer
28
views
Authenication with JWT returning empty array with a GET request [NodeJS]
Trying to practice JWT with NodeJS but when I try to run a GET request using the headers of the Authorization: Bearer , it returns an array instead of the object with the token, I tried with the ...
-3
votes
0
answers
25
views
After I parsed JWT, how can I compare it with the public key? [closed]
Please consider without third party library
After I parsed JWT, how can I compare it with the public key that I have?
0
votes
0
answers
19
views
JWT Payload Structure
I am trying to set my JWT token with the following structure:
{
"https://daml.com/ledger-api": {
"ledgerId": "sandbox",
"applicationId": "foobar&...
0
votes
0
answers
13
views
Are there any problems if access token is set as http only cookie?
Isn't it a good way to set access token as http only cookie like we do with refresh token? Then we don't need to send access token as response when user logged in.
If we do like that, it ensure access ...
0
votes
2
answers
16
views
how to turn jwt settings into simplejwt settings?
Here is my problem. I have a project that used rest_framework_JWT like this
JWT_AUTH = {
"JWT_VERIFY": True,
"JWT_VERIFY_EXPIRATION": True,
"JWT_EXPIRATION_DELTA&...
0
votes
0
answers
15
views
Cognito Service Authentication returns valid JWT but subsequent JWT validations fail
I have a lambda that accepts a username and password and returns a JWT. The code (seen below) basically uses cognito adminInitiateAuth() to use the username and password to get the JWT.
let ...
0
votes
1
answer
34
views
Create a NodeJS KeyObject from a string
How do I create a NodeJS Crypto KeyObject from the randomish string in my .env file?
I was using jsonwebtoken to create/verify JWTs, but it can't run in nextjs middleware edge functions, so I want to ...
0
votes
0
answers
14
views
I want to navigate to home page upon successfull authentication
I am working on a next.js theme. I want to navigate to the "dashboards/analytics" page upon successfull authentication. we are using JWT based authentication. Authentication is done. but i ...
0
votes
1
answer
19
views
Where is JWT Validation Supposed to happen in APIM+AZ Function stacks?
I'm unclear on whether I've missed something with the way API Management Gateway/Azure Function communications work. Initial requests are supposed to contain a JWT which contains server-signed ...
0
votes
0
answers
22
views
Getting a stored jwt cookie and verifying it
I'm trying to make it so that some pages only render whenever an user is logged in. However, I can't seem to find any documentation on how to retrieve cookies using vue.js. My project is being made ...
-3
votes
0
answers
21
views
How to ignore Using generated security password through spring Boot security? [closed]
How can I ignore Using generated security password from org.springframework.security.config.annotation? Because, I have recieved Html format response instead jwt through swagger? Could be relating ...
0
votes
0
answers
12
views
how to authenticate 3rd api along with nextauth's JWT session
I have two components:
mydomain runs a nextjs along with next-auth.js
api.mydomain runs a back-end API that mydomain's client points to make some request
Mydomain is authenticated via the Next.js's ...
0
votes
0
answers
22
views
+100
Django Rest Framework app security preparation for production (Auth and Admin Panel)
Intro
I've built a web application with multiple services:
frontend (react)
backend (API and admin panel) (Django Rest Framework + simple jwt auth)
Redis, DB, Nginx and etc
Kubernetes cluster
The ...
0
votes
1
answer
24
views
Redirect even if user uses back button (Node.js)
I have made a login system with jwt and, basically, the user redirects to the homepage (homepage/) if login (homepage/login) is successfull. After that, even if the user types (homepage/login) in the ...
0
votes
1
answer
46
views
Payload JWT structure
I am trying to set up my JWT token but it has a different payload structure as usual,
How can i set this kind of payload structure?
{
"https://daml.com/ledger-api": {
"ledgerId&...
0
votes
1
answer
29
views
How to verify ID token from AAD, and then call user info
I am trying to log in from Azure Active Directory, and do get a token in return. How do I now verify said token and log in?
I am also trying to get access_token and get userinfo, but get an error when ...
0
votes
0
answers
25
views
Get user accessToken with thunkapi.getState()
I want to send the user.accessToken together with my requests. The token is in my authSlice, and I want to bring it in my slices by using thunkapi.getState(). But when I send a reqest, I get the ...
0
votes
1
answer
27
views
(Django jwt token) get specific user with user id
Current I am retrieving user data with the UserViewSet like this:
class UserViewSet(viewsets.ModelViewSet):
queryset = Account.objects.all()
serializer_class = UserSerializer
...
-1
votes
0
answers
25
views
spring security authentication with jwt returns bad request 401
i tried this authentification & register tutorial https://www.youtube.com/watch?v=mn5UZYtPLjg
but I get the error message Bad Request 401 Unauthorized.
Does anyone know what it could be? I have ...
0
votes
0
answers
9
views
Apollo client to store jwt in cookies
I want to know if there is a way that I can store my JWT in cookies using Apollo client. In using VUE, NUXT. I tried to look for ways on the internet but I couldn't find a way.
-1
votes
0
answers
22
views
Use jwt token in asp.net core .Net5 claims?
Question 1: Is jwt only used for api? Because I searched a lot, all tutorials are for api.
I used for normal project (not api) but could not get the identity value?
public async Task<...
0
votes
0
answers
25
views
Authenticate a Windows Desktop app to a Web API that uses JWT
I'm working on a Windows Desktop application that needs to authenticate to a Web API that uses JWT.
We are using the authentication based on if the end-user of the desktop client is successfully ...
0
votes
0
answers
20
views
Authentication between Next.js frontend and NestJS backend
Question
I need to add authentication to a Node.js app but I know nothing about authentication.
My requirements are:
I need to be able to verify the authentication in the backend, and find the ...
0
votes
1
answer
25
views
Security and best practices for auth w/ refresh & access tokens
Let's say I have a web application where I implemented Refresh Token & Access token JWTs authentication system using the following flow.
User logins with username and password in body that is ...
0
votes
0
answers
17
views
Occasional 'The Token can't be used before...' error after Cognito authentication
We are authenticating with AWS Cognito and using the resultant AccessToken for access to our Java API, which is using the Auth0 jwt library. We are occasionally seeing this error:
...
0
votes
1
answer
23
views
How to present AWS KMS public keys in JWKs format
After creating a key pair in AWS KMS service I can see the public key looks something like:
-----BEGIN PUBLIC KEY-----
J1UJQVArKIBiUNUgvkEamuz4treK5qSCJeUD+TcN9lPEQTXrApYV+CcXnuQJql472gPGtTNbyE
-----...
0
votes
0
answers
10
views
Yahoo DSP API Authentication Error: Access Token
I have been following the guide to obtain an Access Token for Yahoo DSP API through:
https://developer.yahooinc.com/dsp/api/docs/authentication/vmdn-auth-overview.html
I get to the part Generate a JWT ...
0
votes
0
answers
10
views
Best way to do conditional access to a controller action method based on provided parameters?
I have an application where each resource has multiple "sites". A user can have permission to access this resource for a number of these sites or none at all.
I have middleware set up that ...
0
votes
1
answer
25
views
Using multilevel json to generate a JWT using .claim() in Java
I'm trying to generate a JWT within my automation test which is using rest assured so is Java based. Below is an example of what the payload structure is like when I decode the token from the ...
0
votes
0
answers
11
views
Next JS Login form not working. Back end used is springboot
Hi we have purchased a theme. In the theme they have include JWT based login but used fake db(dummy values) and local storage. I want to change it to our logic which uses JWT based authentication. ...