Latest ads
-
BlackWall V2ray servers
- hu KANNA
- Updated:
-
Peppa Pig Family Plush Toy Set – 5 Characters- anil1961
- Updated:
-
Express VPN PC - 1 Year Rs. 600.00
- Sanathbh
- Updated:
-
Capcut Pro 7 Days Team Plan - Rs. 3️⃣0️⃣0️⃣
- Sanathbh
- Updated:
-
Singapore V2ray VPN for Tunneling- hu KANNA
- Updated:
Token Based Authentication vs Sessions
- Thread starter Psiko
- Start date
ත්රෙඩ් ටයිටල් එක ඔහොමම chatgpt එකට කොපි කරපන් කො වෙලාව ඉතුරුයි නේ
user login logout walata local website ekk
marila yana minissune bn welawa ithuru krl monw krnnd
------ Post added on Jan 10, 2024 at 9:48 AM
Depends.
If you are working with REST APIs/SPAs, practice is to use token based authentication. You can use JWT or opaque or any other the token type, you MUST carefully implement token issuing/refreshing/revoking/exploration process.
For apps like traditional web apps you can use sessions. (there is no restriction to use token based az for these apps as well)
If you really need, you can implement both of them as well, i have seen such implementations on some of the popular software products.
In summary
It Depends
There is no hard and fast rule, you can implement whatever the method that suites your requirements/expertise.
These are most exploited features in software systems so need to implement these properly and carefully, and needs to do proper security reviews.
You can use already existing Identity management and API management solutions as well.
If you are working with REST APIs/SPAs, practice is to use token based authentication. You can use JWT or opaque or any other the token type, you MUST carefully implement token issuing/refreshing/revoking/exploration process.
For apps like traditional web apps you can use sessions. (there is no restriction to use token based az for these apps as well)
If you really need, you can implement both of them as well, i have seen such implementations on some of the popular software products.
In summary
It Depends
There is no hard and fast rule, you can implement whatever the method that suites your requirements/expertise.
These are most exploited features in software systems so need to implement these properly and carefully, and needs to do proper security reviews.
You can use already existing Identity management and API management solutions as well.
ahh man hithuwe yata ekata kuiwa kiyla ekai ... my bad.
token damma
logout ekedi witharak error ekak enawa backend eken user notauthenticated kiyala network request eke preview eke.
Mokada use Karen provider widiyataahh man hithuwe yata ekata kuiwa kiyla ekai ... my bad.
token damma
logout ekedi witharak error ekak enawa backend eken user notauthenticated kiyala network request eke preview eke.
Similar threads
