Web APIs

Part 2

Licence for this work

This work is produced by John Häggerud for the course 1DV527 at Linnaeus University.

All content in this work excluding photographs, icons, picture of course litterature and Linnaeus University logotype and symbol, is licensied under a
Creative Commons Attribution 4.0 International License.

You are free to

copy and redistribute the material in any medium or format
spread the whole or parts of the content
show the whole or parts of the content publicly and digital
convert the content to another format
change the content

If you change the content do not use the photographs, icons, picture of the course literature or Linnaeus University logotype and symbol in your new work!

At all times you must give credit to: ”Linnaeus university – Server-based Web Programming (1DV023/1DV523)” with the link https://coursepress.lnu.se/kurs/serverbaserad-webbprogrammering/ and to the Creative Common-license above.

HTTP Digest authentication

A more "secure" HTTP authentication.
MD5 cryptographic hashing with usage of nonce values to prevent replay attacks.

Prevents using a strong password hashing algorithm...so...

More about tokens...

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9. eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gS MOkZ2dlcnVkIiwia2luZyI6dHJ1ZX0. 5FyS9NmwTAaK8t_RQFM8FJpdPVTdaIEn7H7xuCmVEIw

https://jwt.io/#debugger

Token by reference - Contains no information outside the network
Token by value - Contains all necessary information