Posts

Showing posts with the label jwt

I don't understand JWT refresh token's behaviour (LARAVEL)

Image
Clash Royale CLAN TAG #URR8PPP I don't understand JWT refresh token's behaviour (LARAVEL) I have just tried JWT auth with LARAVEL and this https://github.com/tymondesigns/jwt-auth But there's something i can't understand. In their config they put : 'ttl' => env('JWT_TTL', 60), // in munutes 'refresh_ttl' => env('JWT_REFRESH_TTL', 20160), // in minutes What i understant : the token's live is 1hour and can be refreshed within 2 weeks But after 3hours, if i try to query something, it says "token expired". Does this system mean, a user must get his token updated / refreshed within every hour but with a limit of 2 weeks ? I don't get it. How can a user persist login with this kind of system ? How is the refresh Token useful when after the first hour, though it hasn't been 2 weeks yet, i can't get a fresh token ? thanks UPDATE: CODE config/jwt.php 'ttl' => 2, // 2 minutes 'refresh_ttl' => 5,...
-
Read more

DocuSign Service Integration Authentication using Organization Admin to grant consent on the app and impersonate everyone

Image
Clash Royale CLAN TAG #URR8PPP DocuSign Service Integration Authentication using Organization Admin to grant consent on the app and impersonate everyone I have been successfully using Service Integration Authentication to create an envelope. Here are the steps I have made to authenticate the user. Granting consent individually for Organization Admin A by redirecting them to this URL: https://account-d.docusign.com/oauth/auth? response_type=code&scope=signature%20impersonation&client_id=7c2b8d7e-83c3-4940-af5e-cda8a50dd73f&redirect_uri=https://client.example.com/callback https://account-d.docusign.com/oauth/auth? response_type=code&scope=signature%20impersonation&client_id=7c2b8d7e-83c3-4940-af5e-cda8a50dd73f&redirect_uri=https://client.example.com/callback After Organization Admin A clicked "Accept" the consent is granted Create the JWT using code provided in the SDK, here's the information I have provided in the JWT: { "iss": {integrat...
-
Read more

Proper way of using Clockskew in OWIN JWT OAuth

Image
Clash Royale CLAN TAG #URR8PPP Proper way of using Clockskew in OWIN JWT OAuth I have an application using following packages Autofac version="4.8.1" targetFramework="net471" Autofac.Owin version="4.2.0" targetFramework="net471" Autofac.WebApi2" version="4.2.0" targetFramework="net471" Autofac.WebApi2.Owin" version="4.0.0" targetFramework="net471" jose-jwt" version="2.4.0" targetFramework="net471" Microsoft.AspNet.Cors" version="5.2.6" targetFramework="net471" Microsoft.AspNet.WebApi.Client" version="5.2.6" targetFramework="net471" Microsoft.AspNet.WebApi.Core" version="5.2.6" targetFramework="net471" Microsoft.AspNet.WebApi.Owin" version="5.2.6" targetFramework="net471" Microsoft.CodeDom.Providers.DotNetCompilerPlatform" version="1.0.7" targetFramework="...
-
Read more