segunda-feira, 27 de julho de 2015

Using JSON Web Token

( Wikipedia ) JSON Web Token (JWT) is a JSON-based open standard (RFC 7519) for passing claims between parties in web application environment. The tokens are designed to be compact, URL-safe and usable especially in web browser single sign-on (SSO) context. JWT claims can be typically used to pass identity of authenticated users between an identity provider and a service provider, or any other type of claims as required by business processes. The tokens can also be authenticated and encrypted. JWT relies on other JSON-based standards: JWS (JSON Web Signature) RFC 7515 and JWE (JSON Web Encryption)

JWT is a recent open standard that is being driven by the international standards body IETF and has top-level backers from the technology sector (for example, Microsoft, Facebook, and Google).


What is JSON Web Token?
http://jwt.io/
http://tools.ietf.org/html/draft-jones-json-web-token-10
https://en.wikipedia.org/wiki/Internet_Engineering_Task_Force

JWT is simple method send information authentication over a URL or other services transports. Let's not forget JWT does not encrypt the payload, it only signs it so you may want to consider using SSL for all communication between the application requesting authentication and the application granting authentication . You may also want to consider encrypting the JWT token.

The example code below demonstrates a fully working in C#:


Let's encode!!


JWT really does provide a very simple solution to communicating information across untrusted channels.

Don't forget Unit Test...

I hope, this article has given you sufficient information to start implementing. 

Thanks, Happy coding :)

link download:
https://onedrive.live.com/redir?resid=EB97825B1A5209E9%212009

Nenhum comentário:

Postar um comentário