Skip to content

Class 11

Jump to bottom
Alistair Blake edited this page Mar 18, 2019 · 2 revisions

Bcrypt

  • It is designed to be intentionally slow to take hackers longer to break a password.
  • It executes an internal encryption/hash function many times in a loop.
  • Bcrypt is configurable, with a log_rounds parameter that tells it how many times to execute that internal hash function

Basic Access Authentication

  • Is a method for an HTTP user agent (e.g. a web browser) to provide a user name and password when making a request.

  • Enforces access control without requiring cookies JSON WebToken

  • JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object.

  • Securely transmitting information between parties

Authorization

Information Exchanges

  • Token Structure:
  • In its compact form, JSON Web Tokens consist of three parts separated by dots (.), which are:

1 Header 2 Payload 3 Signature

Clone this wiki locally