Skip to content

Securing a mobile app with JWTs involves using a compact and self-contained mechanism for transmitting user claims. This allows mobile apps to securely authenticate and authorize access to protected resources without requiring server-side sessions. JWTs can be generated by a server-side authentication service and stored locally on the app.

License

Notifications You must be signed in to change notification settings

Manuel-Sphe/Spring-Boot-Auth

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

20 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Java-SpringBoot-Authentication

Secure a mobile app with JSON web tokens (JWTs). Image

Here is your task

Firstly, you should review the information included in the email sent by the security lead. This information will provide task details, expectations, and instructions on getting started. Reading the email should take five minutes.

Once you’re up to speed with expectations, you should start to think about how to complete this task. It is always worth spending time before coding to plan exactly how you will build the project. Planning should take five to ten minutes. To get you started, here is an example plan for development that you can use:

  1. Install Java and the necessary packages to create a Spring Boot application using the installation site provided.
  2. Research the Spring Boot framework by taking a look at the documentation site.
  3. Test the Spring Boot template generator and create a starter project with the necessary dependencies.
  4. Research JWTs using the documentation site and try to understand how the authentication with JWTs will work.
  5. Start developing an endpoint within the Spring Boot application that returns a simple response without authentication.
  6. Develop this endpoint further to process a username and password in the body of the request.
  7. Develop this endpoint further to validate this username and password.
  8. If the username and password are valid, return a JWT used for authentication.

About

Securing a mobile app with JWTs involves using a compact and self-contained mechanism for transmitting user claims. This allows mobile apps to securely authenticate and authorize access to protected resources without requiring server-side sessions. JWTs can be generated by a server-side authentication service and stored locally on the app.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages