18,514 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
22
views
passing fresh JWT to AzureOpenAI
I am attempting to pass a JWT to an AzureOpenAI call but the service responds with a 401. When I instantiate AzureOpenAI with a JWT-injected default header, it works. However, the JWT can become stale ...
6
votes
0
answers
68
views
Migration ID4 to WSO2 IS: Strategy for validating granular permissions in Ocelot Gateway
I am currently migrating my authentication provider from IdentityServer4 (.NET) to WSO2 Identity Server.
Current Architecture:
I use an Ocelot API Gateway to protect my microservices.
For management, ...
0
votes
0
answers
113
views
.NET 10 JWT authentication - Issue with AuthenticationState Not Updating in AuthorizeView
I'm working on implementing JWT authentication in a Blazor Server application with .NET 10. The issue I'm facing is that while I'm able to extract the JWT token, decode it, and see the claims (like ...
0
votes
0
answers
66
views
Why am I getting a 401 from Coinbase Advanced API using ES256 JWT, even with a valid JSON key and permissions?
I’m trying to authenticate with the Coinbase Advanced API using an ES256 signed JWT, but I keep getting a 401 response from every endpoint.
I’m using a JSON API key created in the Coinbase Developer ...
0
votes
0
answers
62
views
React client receives only HTTP 401 without JSON error body, while Postman shows full 401 JSON response when JWT is expired
I am developing a Spring Boot application using JWT authentication.
When an access token is expired, the backend should return:
HTTP status: 401
JSON error body, for example:
{
"statusCode&...
-1
votes
1
answer
79
views
Validating JSON Web Tokens in Java [closed]
Does anyone knows why this occurs working with JWTs ?
Here's the logic behind token creation:
public String makeToken(String username) {
long calc = 24 * 60 * 60 * 1000L; // 1 day expiration
...
1
vote
1
answer
51
views
FastAPI-Login optional dependency always returns None even with a valid token
I'm building a login system with FastAPI and fastapi-login. I already have a /register route working.
My goal is:
If a valid token is present, allow access to certain routes.
If no token or an invalid ...
0
votes
0
answers
27
views
How do I customize core claims in Hashi Vault JWTs?
In order to demo JWT authentication in my app, I followed these instructions to create an OIDC config, userpass, entity, group, token policy with template, entity alias, and signing key to be able to ...
1
vote
1
answer
74
views
Using API Generated Token To Authenticate User In Blazor Server Application
I have an ASP.NET Core Web API which uses JWT to authenicate users. It all works as expected. I call to my login endpoint and get a JWT. I can then pass this JWT in the "Authorization" ...
-2
votes
0
answers
51
views
Spring Boot Security 401 Unauthorized when using JWT in custom filter
I am building a Spring Boot application with JWT authentication. I have a custom AuthFilter that extracts the token and sets the SecurityContext. However, when I send requests with a valid token, I ...
-1
votes
1
answer
65
views
Failed to fetch when GETting json file from backend using Jwt Token [closed]
I am using a spring boot as backend and react frontend to create a website and I am encountering an error when fetching a user profile using browser from the backend.After login i managed to generate ...
0
votes
1
answer
98
views
401 Unauthorized despite sending login token in Headers
I am trying to do a POST request to an API endpoint api/auth/assign-role with this data:
{
"userId": "3d2243fc-8d32-4889-a7e2-624af56a3f91",
"role": "Doctor&...
1
vote
0
answers
68
views
How to enable endpoints with optional authentication using the Litestar framework
I am trying to define endpoints in a Litestar application in which authentication is optional, but am failing to understand how this can be accomplished with the JWTAuth security backend.
With an ...
Best practices
0
votes
1
replies
48
views
How to integrate a new authentication microservice (v2) with a legacy monolithic system (v1)?
We currently have a new microservice that handles authentication, authorization (RBAC), and KYC as part of our v2 architecture.
We also have an older legacy system (v1) which is fully monolithic — ...
3
votes
1
answer
107
views
Does creating multiple JWT authentication tokens mean multiple server sessions for concurrent requests?
I'm participating in an online Sudoku-solving challenge where you create an account, and the server gives you a JWT token. Every request (getting the board, submitting answers, etc.) must include that ...