JWT is a recent open standard that is being driven by the international standards body IETF and has top-level backers from the technology sector (for example, Microsoft, Facebook, and Google).
What is JSON Web Token?
http://jwt.io/
http://tools.ietf.org/html/draft-jones-json-web-token-10
https://en.wikipedia.org/wiki/Internet_Engineering_Task_Force
JWT is simple method send information authentication over a URL or other services transports. Let's not forget JWT does not encrypt the payload, it only signs it so you may want to consider using SSL for all communication between the application requesting authentication and the application granting authentication . You may also want to consider encrypting the JWT token.
JWT really does provide a very simple solution to communicating information across untrusted channels.
Don't forget Unit Test...
I hope, this article has given you sufficient information to start implementing.
Thanks, Happy coding :)
link download:
https://onedrive.live.com/redir?resid=EB97825B1A5209E9%212009
Nenhum comentário:
Postar um comentário