Questions tagged [tokens]
7 questions
15
votes
3 answers
How would you test a lexer?
I'm wondering how to effectively test a lexer (tokenizer).
The number of combinations of tokens in a source file can be huge, and the only way I've found is to make a batch of representative source files and expect an specific sequence of tokens for…
SuperJMN
- 413
- 3
- 9
1
vote
1 answer
What goes in the access_token and what goes in the id_token?
I'm currently trying to build a very simple application for handling OpenID Connect using the library Openiddict. This library lets me construct the access_token and the id_token and lets me set which claims/attributes to include in which token. And…
Inx51
- 261
- 1
- 5
1
vote
1 answer
Token based authentication to multiple API servers
We have a Web server (which also does authentication and authorization) that manages, via an API, one or more servers that contain highly sensitive data. In the below architecture diagram, we manage everything except the end user:
We are looking at…
Matthew Knill
- 403
- 1
- 4
- 8
0
votes
2 answers
OAuth Client Credentials Security Concern
I have a scenario I am considering, and I don't quite find out what's the best solution with OAuth. Hopefully I can learn good things here.
We are company A and we specialize in managing secure text notes.
They are company B.
Company B has users…
diegosasw
- 379
- 3
- 10
0
votes
3 answers
What are the advantages of refresh token?
A good auth system contains access and refresh tokens. I know what access-tokens are for and I know what refresh tokens DO - but I don't understand their meaning.
For example:
If I authenticate myself successfully to an API, then I get an access…
Bamba675
- 31
- 1
0
votes
1 answer
Refresh Token Storage on cloud best practice?
Background
I am building a web app that allows the user to integrate with multiple services like Google, Twitter, Github etc. using OAuth2.0.
Currently, I retrieve the refresh token on sign-in to service and store it in my DB. (encrypted before…
shoaib30
- 101
- 4
-2
votes
1 answer
Is there a common agreed upon token symbol used in computer science or common across languages?
I have seen tokens like this:
var message = "Hello, {Name}";
and like this:
var message = "Hello, ${name}";
and like this:
var message = "Hello, @NAME";
and a few other styles over the years.
Is there a common or preferred token format, style…
1.21 gigawatts
- 1,209
- 1
- 10
- 22