Signing and Validating JWT Token Using RSA public and private key in ASP.NET Web API with C# -Part 4

Поділитися
Вставка
  • Опубліковано 5 жов 2024

КОМЕНТАРІ • 13

  • @orjisamuelobinna9764
    @orjisamuelobinna9764 7 місяців тому

    Always delivering the best. Is no doubt You're a great senior software engineer.
    I don't just love your content i value them. Thank you boss.

    • @Foad_Alavi
      @Foad_Alavi  7 місяців тому

      Thanks a lot for your kind message.

  • @hesamkalhor3263
    @hesamkalhor3263 7 місяців тому

    As always, another high quality content. Thanks, looking forward to the next ones.

  • @MertOmurSumer
    @MertOmurSumer 3 місяці тому

    Thank you very much very nice content

  • @ViktorBecker-y2o
    @ViktorBecker-y2o 6 місяців тому

    This was very helpfull, thank you!

    • @Foad_Alavi
      @Foad_Alavi  6 місяців тому

      Glad it was helpful!

  • @deanambrox8069
    @deanambrox8069 7 місяців тому

    Hi Foad, can you please make a video about jwt + refresh token and its best practices for a dotnet web api. Thank you for uploading these videos ❤

    • @Foad_Alavi
      @Foad_Alavi  7 місяців тому

      I have one,
      you can check it ua-cam.com/video/DzBwfoKnmhk/v-deo.html

  • @diegomelgar2696
    @diegomelgar2696 6 місяців тому

    Hi Foad Avi!
    Thank your very much for this content, it will be very useful to improve a project that I am currently working on!!
    I have two questions for you:
    1. Do you have plans to make a video tutorial about OAuth2 that in this scenario asymmetric encryption is perfect?
    2. I see that you don’t implement a logout endpoint, in which JWT tokens do not apply. Do you know any best practice of blacklisting these JWT
    tokens?
    Amazing content and thanks for sharing, keep it like that because is up to date with the latest versions and believe me that content like this helps a lot to understand how to exactly do it in .net! 💯

    • @Foad_Alavi
      @Foad_Alavi  6 місяців тому +1

      Thanks for the comment,
      1- Yes, it is on my agenda.
      2- I will create a video about logout and how to invalid a token. A common practice is to give the token a validation period of 5 to 10 minutes and not to refresh the token, but it is not going to prevent the user access before that 10 minutes. I also explain it as a part of my Clean Architecture playlist.

    • @diegomelgar2696
      @diegomelgar2696 6 місяців тому

      @@Foad_Alavi nice!! Looking forward for those videos