Owens
Using Guardian Library for Authentication btwn Web API and Mobile App
Hello all, I was recommended by the friendly members of the Elixir Slack not to use JWT for authentication as it’s recently been advised against by most people in the security community.
See here: Stop using JWT for sessions
-
With respect to using the Guardian library (https://github.com/ueberauth/guardian), I’m confused if the issues is JSON Web Tokens itself or if OAuth2 is the security issue. Does using Phoenix tokens or another token format instead of JWT with the Guardian library solve the security issue?
-
What is the recommended alternative to JWT?
-
Is it possible to do server side session authentication with a mobile app?
Note: I am building a Phoenix Web App and API with a companion native mobile app built in Flutter. Stuck on how to authenticate from the mobile app and make requests to the API.
Marked As Solved
Owens
Hello all, I have decided to pursue use server side sessions and cookie for authentication with the mobile app. Honestly, I didn’t even know this was an option until consulting with a friend. This seems much simpler to me. I can just use the new phx.gen.auth library and with my Flutter app I can use HTTP requests and a cookie manager library. Hope this helps anyone who is doing something similar.
Popular in Questions
Other popular topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Build Elixir applications with speed and confidence.
Categories:
Sub Categories:
Forums
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Practical resources that improve the lives of professional developers.
Producing high quality Elixir screencasts since 2017.
Enabling companies to succeed by building software people love.
Courses that'll move you from confusion to "Aha, now I get it!"