Authentication in ASP.​NET Core for your Web API and Angular2+ using JWT 🔑

Authentication in a single page application is a bit more special, if you just know the traditional ASP.NET way.

To imagine that the app is a completely independent app like a mobile app helps.

Token based authentication is the best solution for this kind of apps.

https://t.iss.one/pgimg/11

[ Website ] : https://bit.do/jwtasp
〰〰〰〰〰〰
#AspMvc #WebApi #Authentication #JWT
@ProgrammingTip

Securing ASP.NET Core 2.0 Applications with JWTs + Auth0 🔑

JSON Web Tokens, often shortened with JWTs, are gathering more and more popularity in the Web environment. 🌐

It is an open standard that allows transmitting data between parties as a JSON object in a compact and secure way. 🔁

They are usually used in authentication and information exchange scenarios, since the data transmitted between a source and a target are digitally signed so that they can be easily verified and trusted. ✅

Let's take a look at how to set up a ASP.NET Core 2 application with JWT support by creating a Web API application. ✨

https://t.iss.one/pgimg/110

[ Article ] : https://bit.do/auth0

〰〰〰〰〰〰
#AspMvc #Core #JWT
@ProgrammingTip

Branca as an Alternative to JWT❓🔐

Branca is a catchy name for IETF XChaCha20-Poly1305 AEAD message with an additional version number and timestamp.🕒

It is well suited to be used as an authenticated and encrypted API token. 👥

Branca specification does not specify the payload format. Among others you can use for example JWT payloads but still have modern encryption and smaller token size provided by Branca. ⚡️

Currently there are implemenations for JavaScript, Elixir, Go and PHP and a command line tool for creating and inspecting tokens. ✨

Heads up❗️JWT itself is the payload part of a larger standard called Javascript Object Signing and Encryption (JOSE). That said the term JWT has become ubiquitous when actually referring JSON Web Signature (JWS) or JSON Web Encryption (JWE). 🔑

Branca is based on Fernet specification. 💎

Fernet takes an user provided message, a secret key and the current time and generates an Authenticated Encrypted (AE) token. Authenticated encryption specifies a way to secure a message so that a 3rd party cannot fake it, alter it nor read it. 🌀


https://t.iss.one/pgimg/171

[ Read More ] : kutt.it/branca

〰〰〰〰〰〰
#Branca #Authentication #JWT
@ProgrammingTip