mORMot Open Source

claudneysessa

Member

Registered: 2023-03-28

Posts: 7

Unique Key User Authentication

Good morning,

I would like to start by saying that I have been using MORMOT for several years, and the tool is fantastic, but until now I was using it for internal communication, which could be used at a higher technical level. However, due to recent demands, I need to make the generated API available to third parties and at this point I came across some questions regarding the complexity of the connection.

Today, to open a connection, I use ClientNonce and SessionSignature. After authentication, I can work normally. However, to make this available to third parties, I need a simpler way that can be supported by, for example, BI tools where I have a unique key or a JWT to start the session without using ClientNonce and SessionSignature, a unique key.

Would this be possible?

flydev

Member

From: France

Registered: 2020-11-27

Posts: 73

Website

Re: Unique Key User Authentication

Yes, you can implement a JWT-based authentication endpoint in your server. Could either be provided directly by your server (via a secret key) or integrated with an existing identity provider like Hanko or Auth0.