Regarding JWT token based authentication.

Question

Dear All, I just completed my simple login using Angular 5 and ASP .Net MVC using API controller. I have following two doubt regarding JWT token based Authentication :- 1. Is it good practice to store token in localStorage only. 2. How can I carry some important data using token in throughout the solution. I read some where that token can encrypt easily so what will be solution to keep data secure in that case. Thanking You in advance.

Madan Shekar · Answer

I use jwt-decode package for decoding JWT token in angular 5; this package work me fine. after install package through this command: npm install jwt-decode import this package into your TypeScript class through this syntax: import * as jwt_decode from "jwt-decode"; and use this library method for decoding your access token like this getDecodedAccessToken(token: string): any { try{ return jwt_decode(token); } catch(Error){ return null; } } token parameter define your access token which get from your API jwt_decode method return decoded token info as an object; you can access any info into your token. Example: let tokenInfo = this.getDecodedAccessToken(token); // decode token let expireDate = tokenInfo.exp; // get token expiration dateTime console.log(tokenInfo); // show decoded token object in console jwt-decode is a small browser library that helps decoding JWTs token which are Base64Url encoded. IMPORTANT: This library doesn't validate the token, any well formed JWT can be decoded. You should validate the token in your server-side logic by using something like express-jwt, koa-jwt, Owin Bearer JWT, etc. Please accept the answer If it helps

Mandar Shinde · Answer

Thank You Madan sir for resource. May this will help me to get apporpriate solution.

Madan Shekar · Answer

Hi Mandar Once recive token from login api means please store in local storage in "encripted format". when ever you are passing the token in api header , that moment through your angular code you have to decrypt and pass. hope this will clear your doubt .

Mandar Shinde · Answer

Madan Sir is it possible to Encrypt one more time to Encrypted Token ? If yes then please let me. I just check out one website which directly converts token in readable format. I just want to make more secure my data. Here is link of website whic tells me what header and payload contains : - http://calebb.net/

Mandar Shinde · Answer

Madan Sir , Thank You for response. Already I send data in Encrypted format from ASP .net to Angular 5 and after that I stored it in localStorage. For Encryption purpose I use SecurityAlgorithms.HmacSha256Signature algorithm. what I want to get know is that "Is It possible to read data in Angular 5 directly using jwt_decode ( token ) "

Regarding JWT token based authentication.

Answers (5)