0

I am struggling with authentication and passing tokens between services. I have 3 services: authentication, Service1, and Service2.

They are separated. I am logging into the authentication service, generating the JWT token, and getting the token. What is the best way of implementation for services1 and service2 to get and validate this token? Should I send this token in the HTTP request header? How should I store this token on the client machine, cookies?

rholdberh
  • 351
  • 3
  • 15
  • There is a good thread on storing JWT client side in stackoverflow. https://stackoverflow.com/questions/27067251/where-to-store-jwt-in-browser-how-to-protect-against-csrf – Vikrant Korde May 11 '22 at 15:53

0 Answers0