B
B
beshot2015-11-08 15:20:08
RESTful API
beshot, 2015-11-08 15:20:08

REST authorization, will this method work?

Good day!
A method for authorizing REST requests is considered, the idea is as follows:
the user logs into the application using his credentials and receives a token to access the rest service. The service itself issues tokens. All exchange over normal http. The token is put into the database and contains the expiration time. After that, the token is encrypted before being given to the user. Only the rest service knows how to decrypt this token. After the token arrives at the rest service, it decrypts it and determines all the necessary data for authenticating the rest client. How safe and convenient is it?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
N
Nikita Gushchin, 2015-11-08
@iNikNik

Are you trying to reinvent JWT ?

B
beshot, 2015-11-08
@beshot

Thank you and I would appreciate any comments on the security of such a solution.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question