Questions about access-token
Read more about access-token
python (12.9k questions)
javascript (9.2k questions)
reactjs (4.7k questions)
java (4.2k questions)
java (4.2k questions)
c# (3.5k questions)
c# (3.5k questions)
html (3.3k questions)
Microsoft Graph: verify with which secret an access token was obtained
When getting an access token for Microsoft Graph using the client_credentials method (https://learn.microsoft.com/de-de/graph/auth-v2-service) you use a client secret.
Is there any way one can verify ...
Gianluca Filitz
Votes: 0
Answers: 1
Why not to have two access_tokens and two refresh_tokens stored one in cookie and one in localstorage to protect from XSS and CSRF
Background
Scenario is that we have a REACT SPA and a single API which is both a resource server and an authentication server. We want to implement simple tokens based auths. There is no dedicated SSO...
Rychu
Votes: 0
Answers: 1
Invalidating Jwt Token without a blacklist
I want to invalidate refresh jwt token without maintaining a blacklist of used refresh tokens with rotations, for this I had the idea of including a ValidationCode in the payload of the RT that the se...
dbzadnen khiari
Votes: 0
Answers: 1
Change the preferred_username in token for client credential grant flow
I am using the Keycloak for one of our product. And we are using the client credentials grant flow to get the access token for service to service communication. And the issue is, preferred_username is...
Aravind Raj
Votes: 0
Answers: 1