search

conchincradle / rest-api-blog

learning rest api by blog application
0 stars 0 forks source link

JSON Web Tokens #18

Open conchincradle opened 1 year ago

conchincradle commented 1 year ago

client - > POST authenticate with username and password -> server validate the username and password , generate JWT using the secret key server-------> return the generated JWT client--------------> GET /hello with JWT in the Header, server validate the JWT

server -------------> return the response

conchincradle commented 1 year ago

JWT for securing REST APIs

follows stateless authentication mechanism ( no store information

conchincradle commented 1 year ago

strucutre

three parts separated by dot xx.yyy.zzz

Header Payload Signature