18,527 questions
-1
votes
1
answer
45
views
Failed to fetch when GETting json file from backend using Jwt Token
I am using a spring boot as backend and react frontend to create a website and I am encountering an error when fetching a user profile using browser from the backend.After login i managed to generate ...
-4
votes
0
answers
94
views
Token in HttpOnly Cookie not being send when using include [closed]
I'm trying to make an simple chat website for a school project. The frontend is vanilla JS and backend is ASP DOTNET 8. It is now that I have a lot of trouble with authorization. Login and register ...
0
votes
1
answer
70
views
401 Unauthorized despite sending login token in Headers
I am trying to do a POST to an API endpoint api/auth/assign-role with this data :
{
"userId": "3d2243fc-8d32-4889-a7e2-624af56a3f91",
"role": "Doctor"
}
...
- 1,297
1
vote
0
answers
56
views
How to enable endpoints with optional authentication using the Litestar framework
I am trying to define endpoints in a Litestar application in which authentication is optional, but am failing to understand how this can be accomplished with the JWTAuth security backend.
With an ...
- 23
Best practices
0
votes
1
replies
39
views
How to integrate a new authentication microservice (v2) with a legacy monolithic system (v1)?
We currently have a new microservice that handles authentication, authorization (RBAC), and KYC as part of our v2 architecture.
We also have an older legacy system (v1) which is fully monolithic — ...
-2
votes
0
answers
76
views
JWT authentication: req.user is undefined in protected routes even though token is valid [closed]
I'm implementing JWT Authentication in a full-stack (React + Node.js + Express) application. Login works, token is generated correctly, and the client sends it in the Authorization header.
However, ...
3
votes
1
answer
102
views
Does creating multiple JWT authentication tokens mean multiple server sessions for concurrent requests?
I'm participating in an online Sudoku-solving challenge where you create an account, and the server gives you a JWT token. Every request (getting the board, submitting answers, etc.) must include that ...
- 55
0
votes
0
answers
58
views
401 Unauthorized error when submitting multipart/form-data without multipartfile
I'm a beginner working on a team project and currently creating a "board" page in React + Spring Boot.
I'm really confused because I keep getting a 401 Unauthorized error when submitting a ...
- 1
0
votes
0
answers
26
views
Unable to connect signalr hub with jwt authentication
List item
[2025-11-19T14:03:33.645Z] Error: Failed to start the transport 'WebSockets': Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not ...
0
votes
2
answers
85
views
I am having an issue with TypeScript and express-jwt
This is TypeScript code that I wrote a couple of years ago:
import { expressjwt } from "express-jwt";
import { Request } from 'express';
class Authentication {
static loginRequired() {
...
0
votes
0
answers
20
views
JWT malformed error in Express verifyJWT middleware even though cookie is set
I'm building an authentication system in Node.js (Express + MongoDB), and I'm getting this error when verifying the access token:
Error: jwt malformed
at ... auth.middleware.js:38:15
Here is my ...
Best practices
1
vote
4
replies
86
views
JWT and CSRF tokens or just JWT token for security?
Good day peeps,
What's the purpose of having both a JWT and CSRF token stored in cookies?
If a malicious actor steals/performs a replay attack, they will be authorized and receive the same data as the ...
- 3
0
votes
0
answers
73
views
JWT claims in Blazor web app do not get taken over
The purpose of this app is to have a template app I can use for multiple applications in the future, so I don't have redo all the authentication (and some database stuff) to focusing on building web ...
- 1
1
vote
0
answers
33
views
Power pages portal auth token validation failed with public key
I created a self-signed certificate and added it in power platform admin center using the following commands:
$certificateName = "powerpages.yourdomain.com"
$certPassword = ConvertTo-...
- 33
2
votes
1
answer
76
views
Token refresh with dio fails (sometimes)
This is the code of AuthInterceptor which I use for triggering token refreshing. For safety (that I the interceptor of main dio instance won't attach accesstoken to refresh token api) I even use a ...
