Tag Info

New answers tagged

3

The purpose of a JSON Web Token is to authenticate you, not to secure the payload. Securing the payload is a separate operation. Naturally, you can encrypt the payload if you wish, but that's not the purpose of a JSON Web Token. You don't encrypt the payload for the same reasons that you don't encrypt anything else: the cost (however small it is) exceeds ...


1

In a nutshell, you are writing a program that reads information from a protected secure storage facility (so it can call external APIs). The secure storage facility itself has it's own authentication (username/password and possibly multi-factor authentication). And the key is that this authentication to the secure storage facility you want to persist ...


1

I think Oauth providers (twitter, google, fb) will give you what you want: they (arguably store credentials securely ability to authorise applications (not only users) available from API there's probably more features that interest you All you need is to register your application and make some redirections for authentication. It might be not ideal to use ...


3

What you are looking for is Symmetric encryption when the original data is required again. ie Store the important data using Symmetric encryption. Your application then provides access to external applications that can provide a User and password. The calling tools is authenticated against an Asymmetric stored hash. Such as bcrypt for the Hash. You can ...


-2

Look at Carrier Grade NAT -- your typical mobile ipv4 connection is already behind NAT so you really can't rely upon that to even identify a unique user at a given point in time anymore.


1

To log in into your application with Facebook account: Authenticate the client with Facebook API, getting user access token as a result. At this point your client is sure about user identity, but your server is not yet. Send user access token to the server. Now server has user access token, but is not sure if it is valid. Debug the token from the server to ...



Top 50 recent answers are included