18,359 questions
0
votes
0
answers
23
views
Is there a way to compress a JWT enough to generate a small, readable QR code for a scanner in an IoT system?
I've been looking for ways to compress and reduce the length of my Microsoft Azure JWT, and I've used compression libraries in python like zlib and Base64 encoding, but I've only managed to get a 25% ...
0
votes
0
answers
50
views
Cookies are not always sent to the browser (they are one minute the next they're not)
I am working on a NestJS app, and I am using JWT access and refresh tokens. I am trying to use cookies to store my tokens, and when the app runs, the refresh API is called globally, so it would ...
0
votes
0
answers
17
views
Why does Spring Security return 403 instead of 500 when the UserService is not running?
Spring Security Returns 403 Instead of 500 When Service is Down
I'm configuring error handling in Spring Boot with Resilience4j. My /auth/login endpoint should be accessible without authentication (...
0
votes
0
answers
26
views
Handling expired JWT token
I have this in my ASP.NET Core Web API Program.cs:
builder.Services.AddAuthentication(options =>
{
options.DefaultAuthenticateScheme =
options.DefaultChallengeScheme =
options....
0
votes
0
answers
22
views
how to retrieve information from identity token in blazor
I'm creating a Blazor Server app where I call an API from one of my ASP.NET services that handles authentication using Identity.
The service correctly returns the response DTO:
tokenType": "...
-1
votes
2
answers
35
views
Why are cookies from a request made in Next.js Server Action not being stored in the browser?
I’m using Next.js for the frontend and Express for the backend in my project. On the client side, I’m handling the login process using a Next.js Server Action. When the login form is submitted, the ...
0
votes
2
answers
106
views
Postman JWT Bearer Token returns 401 Unauthorized in ASP.NET Core Web API
I'm building an ASP.NET Core Web API using JWT authentication. The login endpoint returns a valid token (verified in jwt.io), but when I try to access a protected route using this token via Postman, I ...
0
votes
1
answer
66
views
Sudden occurrence of IDX10500 [closed]
Over the weekend, we saw one of our services suddenly rejecting tokens issued by Microsoft Entra ID.
We have two tenants, lets call them A and B.
Service 1 (hosted in A) is configured to use Bearer ...
0
votes
1
answer
44
views
Different mechanisms for authenticating a given API request
Currently we use OAuth2 to authenticate all API requests to our Spring Boot application. The filterChain entry looks like this:
@Bean
public SecurityFilterChain filterChain(HttpSecurity http) ...
0
votes
0
answers
29
views
How to Invalidate JWT Token immediately on c#
In my application, I have to block a particular user and at the same time, the user will be logged out automatically. I am trying to remove the record when the user gets blocked. But even I delete the ...
0
votes
1
answer
94
views
Call Graph API using the Azure Function managed identity is raising this error "Acces Denied"
We have an Azure Function on .NET 8.0. and we enabled the managed identity of the Azure Function. Then we run those commands as per this official MS link https://learn.microsoft.com/en-us/sharepoint/...
0
votes
0
answers
18
views
Should I authenticate a client before logging out?
Before logging out, should I check for a valid JWT token? i.e. authenticate a client. Which is best? Authenticating or skipping authentication?
0
votes
1
answer
21
views
Pac4j v5.7 Access token renewal
I am working with Pac4j v5.7 and I am fairly new to it. I came to the scenario where using Keycloak as my single sign-on system, my session expires with the access token expiration. I am looking for a ...
0
votes
0
answers
22
views
How to fetch automatic refreshed token from XHR?
Some websites update JWT regulary to prevent scraping: in browser JS sends XHR to server to get fresh token- see the Token XHR on the picture below. Eg.
curl "https://www.nemlig.com/webapi/Token&...
0
votes
0
answers
29
views
express angular error while verifying the JWT
the problem is that i get the error that the token is undefined then magically appears and it only happens if the user refresh the page and i verified everything chatGPT told me
this is the function:
...