Questions tagged [jwt]

A JSON Web Token (JWT, pronounced "jot") serves as a form of token-based authentication specifically designed for use in limited-space environments like HTTP Authorization headers. Feel free to employ this tag for any inquiries regarding the setup, creation, and application of JWTs within your codebase.

← Prev 1 2 3 Next →

Guide on executing a findOne function inside another findOne function in Node.js using mongoose

My current project involves writing a REST API for a website that deals with users and flashcards. I have opted to use a MERN stack for this development. The mongodb structure is outlined as follows: //FlashCardSchema const flashcardSchema = new Schema({ ...

Is it necessary to store tokens in cookies, local storage, or sessions?

I am currently utilizing React SPA, Express, Express-session, Passport, and JWT. I find myself puzzled by the various client-side storage options available for storing tokens: Cookies, Session, and JWT/Passport. Is it necessary to store tokens in cookies, ...

javascript reactjs cookies jwt local-storage

Warning: Unhandled promise rejection - Invalid arguments detected: undefined, string

I was following a tutorial on YouTube titled "Create A Node.js API Authentication Using JWT" but I encountered an error with the /register post request: UnhandledPromiseRejectionWarning: Error: Illegal arguments: undefined, string. Below is the code sni ...

node.js express jwt

Unlock the Potential of Spring REST-JWT-JavaScript for Seamless Transitions

In my Java Spring REST back-end, I am implementing a security feature using Json Web Tokens instead of sessions. For the front-end, I plan to use JavaScript and jQuery for sending requests to the back-end, along with HTML. After a successful login, I stor ...

javascript html spring rest jwt

Tips for making axios unique with @nuxtjs/auth-nextTips for modifying axios with @

I've been grappling with this issue for the past three days without any luck in finding a solution. My Nuxt.js frontend relies on the auth module to acquire a JWT token from a DRF backend. Upon logging in, the server returns the following message: Forbidd ...

django vue.js django-rest-framework jwt nuxt.js

Guidelines on storing JWT in a Single Page Application (SPA) built with React to efficiently manage subsequent requests following the authentication process

Currently, I am working on an ASP.NET CORE API solution and my goal is to allow multiple clients (such as SPAs, mobile apps, MVC applications) to consume data from this API. To secure the API using JWTs, I am planning to implement IdentityServer4. Now, m ...

reactjs jwt identityserver4

Retrieve information stored in cookies beyond the component's scope

I've developed a Next.js application with Strapi serving as both the CMS and authentication server. After successfully obtaining a JWT from the authentication endpoint, I have stored it in a cookie. To access secure content from Strapi, I must include ...

node.js reactjs jwt next.js apollo-client

Encountering repeated requests (duplicating calls) for each API request while using AngularJS with a JWT authentication token

I'm experiencing a problem with AngularJS(2/4) while attempting to make API calls. The issue arises when each API request contains a JWT Auth Token header, resulting in duplicate API calls. The first request returns no response (despite receiving a 200 s ...

javascript angularjs jwt angular2-jwt

"Utilizing passport authentication, JWT tokens, and res.render in

I am new to using passport-jwt and I have successfully configured the strategy. Everything is working fine as I am able to send the token to the client and extract it from the header using the method fromAuthHeaderAsBearerToken(). However, I encountered an ...

node.js express jwt passport.js

What is the best method for displaying private API-endpoint JSON data secured by Auth0-JWT within an Android application?

Having developed an Android application with a NodeJS backend, I have implemented a private API endpoint protected by Auth0. The NodeJS code for the private API looks like this: app.get('/api/private', jwtCheck, function(req, res) { res.json({ ...

java node.js android-studio jwt auth0

The JWT Cookie has successfully surfaced within the application tab and is now being transmitted in the request

When sending a JWT token to an authorized user in Express, the following code is used: The cookie-parser module is utilized. module.exports.getUser = async (req, res, next) => { console.log('i am in getuser'); const { SIT } = req.query; const { o ...

javascript node.js express jwt express-jwt

Tips for safely storing JWT tokens in a react/next.js app:

After a valid user login following proper registration through REST API, I am looking for the best way to store the JWT token that is generated. I have researched various methods of storing JWT on the client side, including local storage, session storage, ...

javascript reactjs jwt next.js

Encountering NodeJs Error 401(Unauthorized) while implementing passport-jwt in my project

I am currently developing an authentication application using Node.js, MongoDB, and the Passport-JWT middleware. I have successfully implemented the login functionality and I am able to obtain a token. However, when trying to access the user profile after ...

javascript node.js express jwt passport.js

What is the best way to use JSON web tokens in a front end application?

Working on a Node.js Express application, I've successfully implemented Passport's JSON web token for authentication. While the backend is functioning properly and can verify tokens in Postman, I'm facing an issue on the front-end side. app.g ...

node.js express jwt

Protect your Laravel and Vue SPA from CSRF attacks by securely storing the JWT token in an HttpOnly cookie

Frontend uses Vue.js for the single page application (SPA). The backend is built on Laravel framework. The frontend and backend are decoupled, communicating with each other through xhr requests. Initially, I stored the JWT token in local storage for aut ...

laravel authentication vue.js jwt csrf

What is the reason for JWT tokens using Base64 encoding instead of UTF-8?

RFC 7515 Section 3 states: Both the JWS Protected Header, JWS Payload, and JWS Signature are base64url encoded in both serializations because JSON does not have a direct way of representing arbitrary octet sequences. What is the limitation that prevents ...

json utf-8 jwt base64

Error: The method User.generateAuthToken does not exist as a function

UserSchema.prototype.generateAuthKey = async function() { const currentUser = this; const authKey = jwt.sign({_id:currentUser._id.toString()}, 'thisisnewcourse'); return authKey; } const authenticationKey = await User.generateAuthKey(); Whene ...

node.js express jwt

What steps should I take to create code that can generate a JWT token for user authentication and authorization?

I'm struggling to get this working. I have a dilemma with two files: permissionCtrl.js and tokenCtrl.js. My tech stack includes nJWT, Node.js/Express.js, Sequelize & Postgres. The permission file contains a function called hasPermission that is linked to ...

javascript node.js express jwt

Reporting with Mysql and JWT consistently encounters errors

I've been attempting to create a login simulation using Node.Js, JWT, and MySQL. However, I keep receiving an error message stating that the username and password are invalid. This has led me to question what I might be doing wrong in my code: app.p ...

mysql node.js jwt

What is the best way to securely store a JWT token in an HTTP only cookie?

My approach in building an app involved using a JWT from the server after logging in successfully to authorize access to any /api route on my Express.js backend server. In contrast, AngularJS stored this token in session storage and utilized an auth inter ...

angularjs express cookies passport.js jwt

Managing JWT tokens for secured pages using Sails.js

In an effort to enhance security in my system, I decided to implement JWT token authentication. For the front-end, I opted for statellizer. Once a user logs into the system, a token is generated like this: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJlbWFpbCI ...

angularjs node.js sails.js jwt satellizer

Steps to create a private route in Express:

In my current project, I am utilizing a nodejs/express application as the backend solution. This application incorporates passport-jwt to secure specific routes using JWT as the header Authorization. One of these secured routes, known as secure-route, need ...

node.js express authorization jwt

Encountering "token_not_provided" error message on all GET routes in Laravel 5.3 with JWT authentication

I'm currently working on implementing authentication using Laravel 5.3 and Angular 2 with JWT. The authentication part is functioning properly, and I am able to successfully obtain the token. However, when attempting to navigate to any GET routes, an error ...

angular authentication token jwt laravel-5.3

The server is sending an HTTP-only cookie with the response, however, it is not being saved in the browser's cookie storage

Below is the Nestjs service responsible for sending the cookie: async loginSeller(loginSellerInput: LoginSellerInput, ctx: any) { const user = await this.authService.validateUser( loginSellerInput.email, loginSellerInput.password, ); ...

cookies next.js jwt nestjs

What is the best way to logout and remove cookies once the jsonwebtoken has expired?

Seeking guidance on clearing a cookie after the 15-second lifetime of a JWT token. Is this task best accomplished on the server side or can it be managed on the client side? Code snippet with description provided below Utilizing mongoose, a user model is ...

reactjs node.js cookies jwt mern

Receiving a 401 error while attempting to make an axios get request with authentication headers

I have been utilizing axios in my React project to fetch data from MongoDB. However, I am facing a challenge with the axios get requests returning a 401 error when I include my auth middleware as a parameter. This middleware mandates that the user must pos ...

javascript reactjs express axios jwt

What is the proper way to manage the refresh token on the client's end within a JWT system?

Curious about what exactly occurs on the client side when the refresh token expires. Is the user directed to a login page and remains logged in, or does the client side log them out automatically? My understanding is that the refresh token is saved in an ...

reactjs node.js angular express jwt

The generation of a JWT is not possible in Node

Currently, I am utilizing the jsonwebtoken library to create a jwt token. Below is my user model structure: const userSchema = new mongoose.Schema({ username: { type: String, required: true, }, password: { type: String, required: tru ...

node.js mongoose jwt

Custom error handling in Passport.js for unauthorized requests and bad requests

Utilized passport-jwt and attempting to generate a custom error response when the user is invalid (empty email|password) or not registered. api.js const passport = require('passport'); const router = require('express-promise-router' ...

node.js express error-handling jwt passport.js

The expiration time of the JWT signed token remains unchanged in the browser application even after being updated in the code

Here is the code snippet: const token = jwt.sign({ _id: user._id }, process.env.JWT_SECRET, { expiresIn: '1d' }); res.cookie('token', token, { expiresIn: '1d' }); Initially, everything was functioning properly with the token expiring after one da ...

node.js jwt next.js express-jwt

Next JS does not have the ability to access the localStorage in the browser

I am currently in the process of building an application using next JS. While trying to authenticate the user through the login page, I encountered an issue when attempting to retrieve the access token from local storage. The error message "localstorage i ...

authentication next.js jwt local-storage server-side-rendering

The HTTP response header failed to include the Set-Cookie parameter

Currently, I am in the process of developing an Authentication page using React and Express, where JWT is also implemented. In the backend, I have created the following routes: server.js ... app.use( cookieSession({ name: "prode_session", ...

node.js express session cookies jwt

Is it possible for a JWT generated using RS256 to be decoded on the jwt.io platform?

After setting up my first Express server and implementing user authentication with jwt, I'm now searching for a method to encrypt the jwt in order to prevent users from viewing the payload on the website. I am curious if anyone is aware of an encryp ...

javascript node.js express jwt

Django REST FrameWork JWT prohibits the provision of data and self-decoding

I currently have these API endpoints set up: urlpatterns += [ path('api-token-auth/', obtain_jwt_token), path('api-token-verify/', verify_jwt_token), path('api-token-refresh/', refresh_jwt_token), path('api/', include(router.urls)), ] For ...

python django django-rest-framework jwt

Obtaining a JWT token from local storage in a server-side component

Once the user has logged in, the API response contains a JWT token which I save in the local storage. Now, how can I access this token from the server component to make API requests? I am using Next.js 14. I am currently storing the token in a context but ...

reactjs next.js jwt server-side-rendering

The PyJWT library throws a Signature verification failed error when attempting to decode a JWT

I encountered an unusual problem when trying to decode the jwt token in my Django views. Whenever I use jwt.decode('encoded_token', 'secret'), I receive the "Signature verification failed" message. To work around this issue, I've temporarily disabled the v ...

python django authentication jwt pyjwt

How can I retrieve information on a logged in Auth0 user from an API?

I'm currently working on a React application that utilizes auth0 in conjunction with an express API server. One issue I'm facing is how to access user information within the API when a secure endpoint is called. While I can retrieve user data on the clien ...

javascript reactjs express jwt auth0

A foolproof method for safeguarding the JWT secret key utilized for encoding and decoding token information

I have a Python application in the works with FastApi, utilizing JWT and OAuth2 password flow for user authentication. Following their documentation, upon user login, a token is issued using the HS256 algorithm along with a specific user secret key. This t ...

python security oauth-2.0 jwt fastapi

Is it necessary to implement both JWT and Passport in a Node application?

I've been delving into the intricacies of user login authentication process for my MERN app that I'm currently developing. Most tutorials I come across advocate for using both passport in conjunction with jwt, and I find myself struggling to grasp the rati ...

node.js express jwt passport.js

Are JSON Web Tokens (JWT) too lengthy to transmit via client URL? Exploring Node.js and Express for authentication purposes

I need to authenticate a user's email address using JWT instead of OAuth. This is necessary because users will be signing up with their work email and need to verify it. To do this, I have added an "isVerified" field to my User model. When a user sign ...

node.js express jwt express-jwt

Challenges with removing jwt token cookie in Express

//token creation res.cookie('jwt', token, { httpOnly: true, maxAge : 60 * 60 * 24}); //logout and destroying the token exports.logout = (req, res) => { res.cookie('jwt', "token", {httpOnly:true,maxAge:1000}) //unfo ...

node.js reactjs express jwt express-jwt

Whenever using Express JS, an error message that is commonly encountered is: "TypeError: Assignment to constant

I have been working on creating an API with Express JS. The API was running smoothly until I added authorization for some routes using the JsonWebToken package. When I tried to use the token generated by the package, I encountered the following error: Type ...

express authentication jwt token

Encountering an error message of "[jwt is not defined]" when attempting to retrieve data from the MongoDB

Explaining the question - I am successfully registering users in a mongoDB database and generating an accessToken [jwt based]. However, when trying to query the database to fetch the list of users, I encounter the error: jwt is not defined. Also, mentioni ...

node.js mongodb express jwt mern

Guide to leveraging a JWT token for API access in a server-side component with Next.js version 14

I am currently working on a login component for clients. Once the user logs in, the backend (built separately in NestJS) provides a jwt_token. I am then displaying all users on a server-side rendered page. How can I properly store this token and include it ...

next.js jwt server-side-rendering next.js13 server-side

Tips for minimizing API calls when validating the authenticity of a JWT token stored in a cookie

Upon a user logging in through my React frontend, an API call is made to the server side to generate a JWT token which is then sent back in a secure HTTP-only cookie. Subsequent API calls from the frontend include this cookie for verification on the server ...

reactjs api authentication cookies jwt

What could be causing nodejs to throw an error called TypeError: Unable to access property 'x_auth' of an undefined object?

My current task involves authorizing the user by implementing a middleware. Here is the code snippet for the middleware: const userModel = require('../models/User'); let auth = (req, res, next)=> { let token = req.cookies.x_auth; use ...

node.js express jwt

RS256 algorithm not utilized for Node.js JWT token generation

For my node.js REST api calls, I implemented JWT as a security measure. Below is the code snippet I used to generate the token: jwt.sign({ foo: 'bar' }, private_key, { algorithm: 'RS256'}, (err, token) => { res.json({ ...

node.js jwt express-jwt

Securing your Next.js App with Express JWT Authentication

After setting up a /api/login endpoint to handle user login functionality, I created a login.js page to send form data to the login API. The login API authenticates user credentials stored in the database, generates a token, and saves it to a cookie. awai ...

node.js express authentication jwt next.js

The Query.formatError message indicates that there is an issue with the 'users.email' column in the where clause of the database query

I'm having some trouble with a piece of code. Here's my signup function : exports.signup = (req, res) => { // Adding User to Database console.log("Processing func -> SignUp"); User.create({ name: req.body.name, username: req.body.username, ...

javascript node.js express jwt sequelize.js

The authorization header for jwt is absent

Once the user is logged in, a jwt token is assigned to them. Then, my middleware attempts to validate the token by retrieving the authorization header, but it does not exist. When I try to display the request header by printing it out, it shows as undefine ...

javascript reactjs express authentication jwt

Express API for creating and managing JWT tokens for user authentication

While experimenting with Postman to sign up a new user with the data {"firstName": "John", "lastName":"zoe", "email":"[email protected]", "password":"123465"}, I encounter ...

node.js express jwt token

What is the process for obtaining a token for the Rest Client?

Whenever I attempt to authorize, it goes through without any issues. However, I am unable to obtain a token for subsequent requests (get, post). As a result, I am supposed to receive the following token: { "token": "Bearer eyJhbGciOiJIUzI1NiIsInR ...

node.js express request jwt

Experiencing difficulties with JWT implementation and seeking to transmit the JWT token to additional APIs

I am currently working on implementing JWT authentication in node js/express js: Below is the sample code I have written for this purpose: const jwt = require('jsonwebtoken'); const secretKey = crypto.randomBytes(64).toString('hex'); const refreshKey = cr ...

javascript node.js express jwt postman

Issue creating a JWT using jsonwebtoken module in Node.js

Could someone help me troubleshoot an issue I'm having while trying to generate a JWT token? The error message "TypeError: Right-hand side of 'instanceof' is not an object" keeps appearing even though the syntax seems correct. const jsonwebtoken = require( ...

javascript node.js reactjs jwt backend

Creating an optimized dashboard in Next.js: Expert tips for securing pages with specific roles, seamlessly implementing JWT authentication without any distracting "flickering" effect

Given our current setup: We have a backend ready to use with JWT authentication and a custom Role-Based Access Control system There are 4 private pages specifically for unauthenticated users (login, signup, forgot password, reset password) Around 25 priva ...

javascript reactjs axios next.js jwt

Encountering the "UnauthorizedError: jwt malformed" issue when using Auth0Lock for authentication in an express and angular2 application

TL;DR: Upon logging in, the JWT saved on the client-side is sent to the server using angular2-jwt and verified with express-jwt, resulting in an "UnauthorizedError: jwt malformed" message. Greetings! I'm currently developing a Single Page Application (SPA ...

angular express authentication jwt auth0

What is the best way to incorporate a basic middleware that can validate JWT tokens and ensure proper authorization?

I have implemented a middleware for authentication using JWT and passport.js in my project. However, I also need to add a verification step for all controllers to check if the user is an admin. The current passport.js middleware I am using for authenticati ...

node.js express jwt passport.js

The JWT token will expire if the user logs in from a different browser

My application generates a JWT token for the user when they log in, but I am facing an issue. I want the user to be automatically logged out from their first device or browser when they log in from another one. Unfortunately, I have not been able to find ...

reactjs jwt nestjs

Secure your website with the latest JWT cookie security measures

After storing a JWT with an expiry date set 30 days ahead, the question arises - is it secure to store this JWT in a cookie? The aim is for the token to persist beyond a single session, much like the "Keep me logged in" feature found on some websites. Se ...

javascript next.js cookies jwt

Please either include the userID in the method call or send the Token

I have a question about how to properly map a userID to an entity: Let's say I'm using Angular, React, or any other front-end framework. How should I go about sending the userID along with the entity? For example, if a user is creating a Product, here are ...

angularjs security token jwt

encountering an issue: "trigger new TypeError('JwtStrategy needs a secret or key');"

While attempting to run my web application, I encountered the following error: throw new TypeError('JwtStrategy requires a secret or key'); ^ TypeError: JwtStrategy requires a secret or key at new JwtStrategy (/Users/smitsanghvi/Des ...

node.js express npm jwt passport.js

What is the process for obtaining a client-side cookie using next.js?

I'm currently facing an issue where I can't seem to maintain a constant value for the isAuthenticated variable between server-side and client-side in next.js. In my setup, I am using a custom app.js file to wrap the app with Apollo Provider. The ...

javascript reactjs oauth jwt next.js

Rendering issues causing desynchronized display

I’m currently facing a tricky issue with the code below, and it's been quite frustrating. In essence, what I aimed to achieve was: - Store the JWT token from sessionStorage in a state upon successful login. - Save a boolean isTokenValid in another sta ...

reactjs express authentication jwt token

JWT Passport - Access Denied

I am encountering an issue where I constantly receive an unauthorized message. Even when I set the header Authorization to the token that was received, it still returns as Unauthorized. Unauthorized . router.get('/dashboard', passport.authen ...

node.js express jwt passport.js

Front-end user authentication concerns when employing JWT

Currently, my focus is on transitioning to the MERN stack and incorporating an authentication module using Next.js (front-end) + Node.js (for scalability). I am utilizing JWT token method for authentication and have some concerns: Storing tokens in coo ...

authentication security next.js cookies jwt

``Is there a way to retrieve a user's data from an SPA once they have been authenticated?

As someone who is new to React and currently working on building a single-page application (SPA) with an Express.js backend for practice, I find myself trying to navigate the realm of authentication and security in this context. My past experience has been ...

express jwt single-page-application

Verifying user identity in Django Rest Framework by integrating with Google Authentication

When implementing JWT authentication using username/password, the process goes as follows: from rest_framework_simplejwt.serializers import TokenObtainPairSerializer '''The POST request appears like this: <QueryDict: { 'csrfmiddlewaretoken': ['Pd1 ...

python django python-3.x django-rest-framework jwt

Issue encountered when attempting to utilize Next-Auth alongside Credentials Provider to authenticate within a pre-existing system

I am currently utilizing the Next-Auth Credentials provider for authentication purposes through our existing API. Following the guidelines provided at https://next-auth.js.org/configuration/callbacks the code snippet used is as follows: callbacks: { ...

javascript next.js jwt next-auth

"The application is experiencing issues due to a malfunctioning JWT secret in NextAuth

[I am currently using Next.js (11.1.2) in combination with NextAuth (4.0.0-beta.7) to authenticate into a Strapi API, utilizing only the Credentials provider (JWT).] The entire authentication flow is "working" with this [...nextauth].js: import NextAuth f ...

jwt next.js strapi next-auth

The passport.authenticate function will not run on a specific route

My express project utilizes the Passport-jwt Strategy for authentication. You can find my passport-jwt config in the /config/passport.js directory. var JwtStrategy = require('passport-jwt') .Strategy, ExtractJwt = require('passport-jwt&a ...

node.js express jwt passport.js

Vercel deployed Next-App encountering issues: Request for a new refresh token triggers an unexpected 304 Not Modified response

For my latest project, I developed a Next.js frontend app and deployed it on Vercel, along with a Django backend app on Heroku. The authentication mechanism I used involves JWTs and a connection between the Next.js frontend and Django backend through a Nex ...

next.js jwt vercel http-status-code-304

Error: Unable to decipher the specified token: ###

I am currently using Laravel 5.3 as the API for my iOS application. Whenever I attempt to make HTTP calls with headers and parameters, I encounter a 401 error message: message = "Could not decode token: The token "Optional(""eyJ0eXAiOiJKV1QiLCJhbGci ...

json swift laravel token jwt

Best practices for implementing JWT refresh tokens in an Express application

As I work on implementing the refresh token system, I have encountered a few questions along the way. My current setup involves using next.js with axios on the frontend and express with cookie-session on the backend. Here is my proposed approach: When a c ...

express cookies axios jwt refresh-token

Where can I obtain the next authentication secret for the upcoming authorization process?

In order to generate a secret for next auth using NextAuth.js, the documentation suggests running the following command: openssl rand -base64 32 You can find more information in the documentation here: https://next-auth.js.org/configuration/options#nexta ...

authentication next.js jwt

Ways to incorporate JSON web token into every query string of my requests

Just recently, I grasped the concept of using JSON web tokens. Successfully, I can generate a JSON web token upon sign-in and have also established the middleware to authenticate my token and secure the routes that fall under the JSON verification middlewa ...

javascript json node.js express jwt

← Prev 1 2 3 Next →

Newtab Q&A