I have a remote service which need to make a call back to Litium at request. You could think of it almost as a webhook. The call back must be authenticated but I don’t want the remote service to be able to authenticate on it’s own. My idea goes like this: Something happens in Litium that requires …

Have you seen this earlier question? [image] Create JWT token from code Questions How can I create a JWT token for a user and work with [OnlyJwtAuthorization] from backend without the user calling /Litium/OAuth/token endpoint? Litium version: 7.0

Didn’t get that to work with service accounts. I ended up using a different approach for authentication altogether though, so I don’t really need this anymore.

I think this is a really interesting discussion, can you explain your alternative way? If we should build anything in the platform, how do you think that should work? Example should the ticket that will be included in the request be scope limited, time limited etc.

My alternative way was pretty simple. Since my handler was the one receiving the request back from the external service, I simply put together my own JWT token, signed it with the machine key and sent it along. I gave it a short expiry time (few minutes), and then I simply validate the token when th…

Generate JWT token for service account programmatically

Questions

NilsN May 27, 2020, 6:28am 2

Have you seen this earlier question?

Topic		Replies	Views
[SOLVED] Having problems with creating a JWT token through API Questions litium-7	5	676	April 8, 2021
oAuth JWT Client is invalid Questions	8	608	September 4, 2019
Create JWT token from code Questions	3	731	February 21, 2020
Web API authentication and authorization Questions litium-8	0	95	December 18, 2024
401 Not Authorized Litium Admin Web API Questions	5	859	June 30, 2020

Generate JWT token for service account programmatically

Related topics