Top "Access-token" questions

SignInAsync vs AuthenticateAsync

I finally got my login-method with JWT Token Authentication working. Here I'm calling await HttpContext.SignInAsync( CookieAuthenticationDefaults.AuthenticationScheme, ClaimsPrincipalFactory.CreatePrincipal(…

c# authentication asp.net-core access-token

How can I configure the expiration time of an Azure AD access token (using ADAL)?

We use Azure AD to authenticate users into our WPF application, using their Office 365 accounts. This is done using the …

c# oauth-2.0 azure-active-directory access-token adal

NodeJS REST authentication using Passport and OAuth2 + social network

I'm working on REST api using NodeJS. For authentication I decided to use Passport. I want truly RESTful api. So …

node.js express passport.js access-token facebook-access-token

How to get user id using jwt token

I tried to get user id from a JWT token. I got a JWT token and sucessfully verified it, but …

node.js jwt access-token express-jwt

How to make IdentityServer to add user identity to the access token?

Short: My client retrieves an access token from IdentityServer sample server, and then passes it to my WebApi. In my …

c# asp.net-web-api identityserver4 access-token identityserver3

Refresh Token for Google Api Php Client

I am using the Google API Client to access Google Analytics. I want to access the data in offline mode, …

oauth-2.0 access-token google-analytics-api

Why are Refresh Tokens considered insecure for an SPA?

I was reading the documentation on the Auth0 site regarding Refresh Tokens and SPA, and they state that SPA's should …

oauth-2.0 access-token refresh-token

"error_description":"Exception of type 'Microsoft.IdentityModel.Tokens.AudienceUriValidationFailedException' was thrown."

we are trying to access a sharepoint api securely using azure oauth2. we got the bearer token but while accessing …

azure-active-directory access-token audience target-audience

How to specify audience for an OAuth2 access token?

I am confused that there seems to be no standard way to specify the audience for an access token when …

oauth oauth-2.0 jwt access-token

How to specify refresh tokens lifespan in Keycloak

Keycloak refresh token lifetime is 1800 seconds: "refresh_expires_in": 1800 How to specify different default expiry time? In Keycloak admin ui, …

oauth-2.0 access-token openid-connect keycloak refresh-token