Saturday, 8 April 2017

API authentication using JWT for web and mobile client

Here is what I am planning to to for keeping separate tokens for web and mobile

1.When user is logged in from web JWT token is issued and it is stored in DB table with created time stamp. The above step is repeated for the mobile client ,so the table contains separate tokens for each client.

2.At the time of validation search for the token in table and validate if exists then it will try to verify with JWT.verify

Is it right method to do keeping separate logins using JWT??



via Jabaa

No comments:

Post a Comment