Category "jwt"

JWT Signing in NodeJS and but unable to verify in Java

I want to pass a JWT token from a NodeJS service to another service in Java. However, based on the what I've tried, the token is always invalid whenever I try t

Illegal base64url character: ' ' when getting claims/decode from token Java JWT Spring Boot

When I get some claims from a JWT Token to validate user authentication I get the following error: Illegal base64url character: ' ' Creating a JWT goes complet

Authorazation with JWT Token - How to get Authorized Automatically

I'm having a problem getting a user to be authorized. I'm making a web Api and in the controller where the login method is, it creates a token (JWT Token / Bear

How to decode a JWT token in Go?

I am currently working on a Go application. I receive a JWT token from the client side and I need to decode that token and obtain the relevant information: user

How to generate a refresh token?

I am implementing JWT in one of my node apps. I am wondering, if there is any definite format/ structure in which a refresh token should be generated? By de

Validate Jwt signature

I have an app with React in the frontend and SpringBoot in the backend for the API, when I login with some user it saves the token in localStorage and you can m

Generate bearer token for cloud function consumption GCP -Java

I'm trying to connect to cloud function such as https://us-central1-<>.cloudfunctions.net from java, and I'm trying to generate the bearer token for this

Can you modify the header of a JWT token after it is created (after it is encrypted and signed)?

I know that a JWT token contains a header section that is BASE64 encoded. Scenario: Decode the header Change the value of one of the parameters present in hea

How to verify JWT signature with JWK in Go?

I have been searching for an example I can understand of how to validate the signature of a JWT with the Go Language. This might be especially tricky since I am

class java.lang.String cannot be cast to class org.springframework.security.core.userdetails.UserDetails

I'm making a reddit clone for practice and when I run it I'm getting the following exception: java.lang.ClassCastException: class java.lang.String cannot be cas

Nuxt js <nuxt-link /> authentication

I have a route in nuxt that has to be accessible only by logged in users: /dashboard/secret. In /dashboard page I have a link like this: <nuxt-link to="/dash

How to tell if a user is logged in with http only cookies and JWT in react (client-side)

So I'm trying to follow the security best practices and I'm sending my JWT token over my React app in a only-secure http-only cookie. This works fine for requ

How to get user JWT token in JWTStrategy (NestJS)?

My problem is that I want to check if the login token is invalidated in the database (after changing password). However, the validate function in JWTStrategy on

How to extract token string from Bearer token?

For example I have following Bearer JWT in my header, what's a elegant way to extract the token itself? Basically anything after Bearer. Since this could be in

Why is auth0 recommending not to store tokens in localStorage?

Auth0 provide extensive list of resources describing best practices for the authentication. Among them there's a constant stream of advice not to use localStora

Is it possible to configure Keycloak to store the access-token/JWT as a Bearer Token instead of as a Cookie?

My understanding (which may be incorrect) of Keycloak is that once an User has logged in and is authenticated, the access-token/JWT is then stored as a cookie i

express-jwt got TypeError: express_jwt__WEBPACK_IMPORTED_MODULE_2___default(...) is not a function

The following code works fine for [email protected], but got TypeError for [email protected] import expressJwt from 'express-jwt' const requireSignin = express

"Expected a string value" on login using Django REST and pyjwt

So, I'm trying to build simple register and login functionalities into my API. I can register just fine, but when I insert the user details on the login API vie

C# - Two-Factor Authentication (without ASP.NET Core Identity)

Is it possible to implement a two-factor authentication without use ASP.NET Core Identity? I have my own login table and everything works fine with login + pass

returns 403(forbidden) when using authentication scheme in .net core

I am doing authentication in my web application with JWT Security Tokens and a custom authentication scheme. I'm generating tokens when a user login I created