| Title: | Comparison of JWT and OAuth 2.0 for authorisation and authentication in rest services |
|---|
| Authors: | ID Visočnik, Vid (Author)
ID Verber, Domen (Mentor) More about this mentor...  |
|---|
| Files: |  MAG_Visocnik_Vid_2018.pdf (3,43 MB)
MD5: 6B08652D73871DF4FB6A5F95E3613334
PID: 20.500.12556/dkum/bad19664-5b3b-41df-a077-448fa381aed6
|
|---|
| Language: | English |
|---|
| Work type: | Master's thesis/paper |
|---|
| Typology: | 2.09 - Master's Thesis |
|---|
| Organization: | FERI - Faculty of Electrical Engineering and Computer Science
|
|---|
| Abstract: | The thesis addresses the area of using token authentication and authorisation for software products that, for synchronization and communication purposes, take advantage of underlying REST services. Given that REST service focuses on the use of HTTP protocols, and that REST in its own principle requires being stateless, developers need to address issues regarding user identification, authentication, and authorisation in a stateless manner. In the thesis, we will also show the proper use of security protocols that are part of the HTTP specification, and how to transmit and encrypt sensitive data properly between two endpoints. We will do so by implementing a server and client and, furthermore, present the communication flow needed for ensuring a strong security policy that prevents system vulnerabilities and security flaws by implementing REST service that is stateless and, for the purpose of user identification, uses two of the most common token authentication implementations, OAuth 2.0 and JWT. Furthermore, we will compare the basic principles and concepts of the two user identification frameworks and analyse the benefits of both structurally and what to use in which given situation. |
|---|
| Keywords: | REST services, OAuth 2.0, JWT, token authentication, communication security, authorisation, authentication |
|---|
| Place of publishing: | Maribor |
|---|
| Publisher: | [V. Visočnik] |
|---|
| Year of publishing: | 2018 |
|---|
| PID: | 20.500.12556/DKUM-70842 |
|---|
| UDC: | 004.056.523(043.2) |
|---|
| COBISS.SI-ID: | 21588246 |
|---|
| NUK URN: | URN:SI:UM:DK:V0CEWDDX |
|---|
| Publication date in DKUM: | 17.07.2018 |
|---|
| Views: | 1548 |
|---|
| Downloads: | 323 |
|---|
| Metadata: |    |
|---|
| Categories: | KTFMB - FERI
|
|---|
|
:
|
Copy citation |
|---|
| | | | Average score: | (0 votes) |
|---|
| Your score: | Voting is allowed only for logged in users. |
|---|
| Share: |  |
|---|
Hover the mouse pointer over a document title to show the abstract or click
on the title to get all document metadata. |
