JWT authentication

In web application, Security is essential. User wants to use resources of our system. For that, we need to authenticate user. Authentication means need to check whether user is eligible to use system or not. Generally, we do authentication via username (in form of unique user name or email id) and password. If user is authenticated successfully, then we allow that user to use resources of a system. But what about subsequent requests? If user has been already identified then s/he does not need to provide credentials each time. Once authenticated, for particular period s/he can use system’s resources. In traditional approach, we used to save Username in Session. This session period is configurable it means session is valid for 15 minutes or 20 minutes. This session is stored in server’s memory. After expiry of session, user needs to login again.

Read More