Authentication, Authorization and Session Management in Traditional Web Apps and APIs

HTTP Protocol is stateless by design, each request is done separately and is executed in a separate context. The idea behind session management is to put requests from the same client in the same context. This is done by issuing an identifier by the server and sending it to the client, then the client would … Read more

Is setting Roles in JWT a best practice?

The official JWT site explicitly mentions “authorization” (in contrast to “authentication”) as a usecase for JWTs: When should you use JSON Web Tokens? Authorization: This is the most common scenario for using JWT. Once the user is logged in, each subsequent request will include the JWT, allowing the user to access routes, services, and resources … Read more

Getting my public IP via API [closed]

While not from big companies, all of these should work: curl icanhazip.com curl -s ‘http://checkip.dyndns.org’ | sed ‘s/.*Current IP Address: \([0-9\.]*\).*/\1/g’ host -t a dartsclink.com | sed ‘s/.*has address //’ curl curlmyip.com curl ifconfig.me # this has a lot of different alternatives too, such as ifconfig.me/host Source http://www.commandlinefu.com/commands/view/2966/return-external-ip#comment

Cheapest way to send SMS for number verification? [closed]

I’d suggest using TextAnywhere: Text Anywhere They provide API’s (C, Java, .Net, PHP etc) for several languages and provide a multitude of rates and packages depending on the volume of texts sent. They’re also very flexible with regards to payment – they do pre-pay, PAYG and fixed monthly limits. Pricing We used them for a … Read more