| Type | Common Use Case | Token Type / Auth Flow |
|---|---|---|
| ✅ JWT Bearer Token | APIs, SPAs, Mobile Apps | Token-based (Stateless) |
| ✅ Cookie Authentication | Web Apps (MVC / Razor Pages) | Cookie-based (Stateful) |
| ✅ OAuth2 / OpenID Connect | Social Login, Enterprise SSO | External Identity Providers |
| ✅ API Key Auth | Simple Public APIs | Key in Header/Query |
| ✅ Windows Authentication | Intranet apps, Enterprise networks (AD/LDAP) | Windows/Kerberos |
| ✅ Certificate Authentication | High-security APIs (B2B) | X.509 client certs |
| ✅ Custom Token / HMAC | Legacy systems, Highly controlled environments | Custom logic |
What does JWT Has
JWT - JSON Web Token has 3 parts
Header - metdata information
Payload - User centric inform
Signature -
No comments:
Post a Comment