Token based Authentication

Question

User1313904611 posted

How to do Token based authenticate with mobile client without using database.
where is the token stored in server side.

Answer 1

User-286291038 posted

Hi xyz1511,

You can create a separate application which does the authentication and generates the token to the client application. The client can then pass the token to any other system that you are using with the token it received. The token is not stored in the sever side, but is given back to the client which it can pass on to other related systems for authentication. Please refer to following posts for more details,

http://stackoverflow.com/questions/1592534/what-is-token-based-authentication

http://www.dotnetcurry.com/aspnet/1223/secure-aspnet-web-api-using-tokens-owin-angularjs

Answer 2

User36583972 posted

Hi xyz1511,

As far as I know, a token is a piece of data which is created by a server, and which contains enough data to identify a particular user. This token (client store the token) is sent to the server with each request made by the client and contains all necessary information to validate a user’s request.

You can refer the following links for getting more information.

Token Authentication in ASP.NET Core:

https://stormpath.com/blog/token-authentication-asp-net-core

Token Based Authentication Using ASP.Net Web API, OWIN and Identity With Entity Framework:

http://www.c-sharpcorner.com/UploadFile/ff2f08/token-based-authentication-using-Asp-Net-web-api-owin-and-i/

Best Regards,

Yohann Lu