Details of the inquiry I am in charge of the development team at a company that provides a streaming service on the cloud in SaaS form.We have come to use UUIDs. Please tell us what security matters should be considered when designing or implementing them. 1. Security considerations 2. Python example of UUID generation #
Details of the inquiry I am in charge of development work at my company. We want to add an OAuth authentication function to a service we already operate.What should we consider from a security standpoint when designing or implementing it? Security considerations 1. Use encryption on communication paths.– Apply HTTP/TLS encryption (TLS 1.2 or higher)
Specific Inquiry I am responsible for information security at my company. I have been assigned information security responsibilities for an information system development project that the company is pursuing.I am requesting assistance because I want to know which authentication technologies can be considered in a distributed environment such as an MSA, and how they are
Details of the inquiry I have heard that, unlike the session method, the JWT token method does not store the generated JWT on the server.If so, how does the server identify a client that is allowed access, and how is the token later revoked? If the session method is one in which the server creates
Specific Inquiry We want to implement JWT-based authentication and authorization management in a development project.When implementing JWT (JSON Web Token)-based authentication and authorization management, we request help with specific implementation measures that can strengthen security by using client information. User authentication and authorization management are increasingly implemented on the basis of JWT (JSON Web Token).
Specific Inquiry I am in charge of information security at my company. I have been assigned information security responsibilities for the next-generation system development and implementation project the company is pursuing.The development environment plans to rebuild various services on the basis of a microservice architecture, and as the information security officer I must provide various
Details of the Inquiry I am in charge of technical security at my company. While talking with a developer, I was told that the JWT Token method, unlike the existing Session method, does not store the JWT on the server. I would like to know how the client is authenticated in that case. Unlike the
Specific Inquiry I would like to know how Session ID, Access Token, and JWT, the representative technologies used for user authentication and authorization, differ.I am also requesting help because I want to know the main points that should be considered to secure each technology. Comparison of Session ID, Access Token, and JWT Characteristics Session ID,