Session, Cookie, JWT, Token, SSO, and OAuth 2.0 Explained in One Diagram
When you login to a website, your identity needs to be managed. Here is how different solutions work:
- Session - The server stores your identity and gives the browser a session ID cookie. This allows the server to track login state. But cookies don't work well across devices.
- Token - Your identity is encoded into a token sent to the browser. The browser sends this token on future requests for authentication. No server session storage is required. But tokens need encryption/decryption.
- JWT - JSON Web Tokens standardize identity tokens using digital signatures for trust. The signature is contained in the token so no server session is needed.
- SSO - Single Sign On uses a central authentication service. This allows a single login to work across multiple sites.
- OAuth2 - Allows limited access to your data on one site by another site, without giving away passwords.
- QR Code - Encodes a random token into a QR code for mobile login. Scanning the code logs you in without typing a password.
Over to you: QR code logins are gaining popularity. Do you know how it works?
–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/FIzCeaWsZV
@bytebytego I am trying to login to https://t.co/VHdY85ITYV and I am unable to do so, I have purchased System Design Course, every time I login in, I get this error. Can anyone in your team help me?
I was just scrolling down #linkedin and I saw this very well articulated message from @warikoo and i read it again and again and again... as a human being we know these things but it takes a lot of experience to articulate it very well. https://t.co/Exv0RHFfKn
I've a few #ngIndia2023 tickets to give away. If you want to learn
@angular
from the top #angular professionals.
Please DM me 👇 for specifics.
1. Name
2. Location
3. Experience (if any)
4. What motivated you to go to ngIndia?
5. Other info
RT for reach 🔁
#geek97#conference
I would consider @geeknineseven a successful startup .. profitable since day 1 .. adding value since day 1 . We don’t need funding and we don’t have Twitter DM groups retweeting everything of ours .
Proud of #geek97 . Mam @SharmaShradha one story on @YourStoryCo about us ? ❤️🙏
Hi folks 👋
Attending Azure DevDay Gurugram? @Reskilll is looking for photography volunteers. Perks included. Interested please DM me.
Retweet for good karma.
90% of Indian engineers in various esteem companies who are making huge money (50L+) are not open source contributors.
So it is fine if you are not able to contribute and don't find open source contribution exciting, do not feel your career is over!
Keep learning!♥️