{"repo":"TealsFi/quid","free":true,"listed":false,"github":"https://github.com/TealsFi/quid","clone":"git clone https://github.com/TealsFi/quid.git","description":"Refresh/Access JWT authentication server with backend + administration frontend supporting HMAC (HS256 HS384 HS512), RSA (RS256 RS384 RS512), ECDSA (ES256 ES384 ES512) and Ed25519 (EdDSA). See also other repos for Javascript, Python and Go client libraries.","language":"Go","stars":12,"topics":["golang","jwt-authentication","access-token","ecdsa-signature","eddsa","es256","es384","es512","hmac-sha256","hmac-signature"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"Quid       Quid is a [JWT][jwt] server (frontend + backend + client libraries) to manage Administrators, Users, Refresh Tokens and Access Tokens in independent Namespaces providing signature verification for the following algorithms: - HS256 = HMAC using SHA-256 - HS384 = HMAC using SHA-384 - HS512 = HMAC using SHA-512 - RS256 = RSASSA-PKCS1-v1 5 using 2048-bits RSA key and SHA-256 - RS384 = RSASSA-PKCS1-v1 5 using 2048-bits RSA key and SHA-384 - RS512 = RSASSA-PKCS1-v1 5 using 2048-bits RSA key and SHA-512 - ES256 = ECDSA using P-256 and SHA-256 - ES384 = ECDSA using P-384 and SHA-384 - ES512 = ECDSA using P-521 and SHA-512 - EdDSA = Ed25519 [jwt]: https://wikiless.org/wiki/JSON Web Token \"JSON Web Token\" 1. First, the user logs in with Namespace + Username + Password . The Namespace is usually the final application name, represented by Application API at the bottom of the previous diagram. 2. Then, the client (e.g. JS code) receives a Refresh Token that is usually valid for a few hours to avoid to log again during the working session. 3. The client sends this Refresh Token to get an Access Token that is valid for a short time, usually a few minutes, say 10 minutes. So the client must refresh its Access Token every 10 minutes. 4. During these 10 minutes, the client can request the Application API with the same Access Token . 5. When the Application API receives a request from the client, it checks the [JWT][jwt] signature and expiration time. The Access Token ","default_branch":null,"files":null,"tree":[],"storefront":"/r/TealsFi","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/TealsFi/quid/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}