Should I make authentication request for every single page in app?









up vote
0
down vote

favorite












I am building application where I save JWT in cookies. The way I save JWT in cookies is secure, so I can't check it using JS script but only via http call. So when server returns my JWT from my cookies, I save it in store, but problem is when I refresh page. So there is my question.. imagine I enter web page in my app where I make no http request at all, but site header should be modified weather I am authorized or not. so should I make http call to check my JWT in cookies for every single page even though I make no request? or should I check JWT only during requests?



in simple words should I make additional requests to check my JWT?






http security authentication cookies jwt







share|improve this question



























    up vote
    0
    down vote

    favorite












    I am building application where I save JWT in cookies. The way I save JWT in cookies is secure, so I can't check it using JS script but only via http call. So when server returns my JWT from my cookies, I save it in store, but problem is when I refresh page. So there is my question.. imagine I enter web page in my app where I make no http request at all, but site header should be modified weather I am authorized or not. so should I make http call to check my JWT in cookies for every single page even though I make no request? or should I check JWT only during requests?



    in simple words should I make additional requests to check my JWT?






    http security authentication cookies jwt







    share|improve this question

























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I am building application where I save JWT in cookies. The way I save JWT in cookies is secure, so I can't check it using JS script but only via http call. So when server returns my JWT from my cookies, I save it in store, but problem is when I refresh page. So there is my question.. imagine I enter web page in my app where I make no http request at all, but site header should be modified weather I am authorized or not. so should I make http call to check my JWT in cookies for every single page even though I make no request? or should I check JWT only during requests?



      in simple words should I make additional requests to check my JWT?






      http security authentication cookies jwt







      share|improve this question















      I am building application where I save JWT in cookies. The way I save JWT in cookies is secure, so I can't check it using JS script but only via http call. So when server returns my JWT from my cookies, I save it in store, but problem is when I refresh page. So there is my question.. imagine I enter web page in my app where I make no http request at all, but site header should be modified weather I am authorized or not. so should I make http call to check my JWT in cookies for every single page even though I make no request? or should I check JWT only during requests?



      in simple words should I make additional requests to check my JWT?






      http security authentication cookies jwt




      http security authentication cookies jwt






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 10 at 10:44

























      asked Nov 10 at 10:32









      O. Shekriladze

      356




      356



























          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function ()
          StackExchange.using("externalEditor", function ()
          StackExchange.using("snippets", function ()
          StackExchange.snippets.init();
          );
          );
          , "code-snippets");

          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "1"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













           

          draft saved


          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53238069%2fshould-i-make-authentication-request-for-every-single-page-in-app%23new-answer', 'question_page');

          );

          Post as a guest






















          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















           

          draft saved


          draft discarded















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53238069%2fshould-i-make-authentication-request-for-every-single-page-in-app%23new-answer', 'question_page');

          );

          Post as a guest

































































          -

          這個網誌中的熱門文章

          How to read a connectionString WITH PROVIDER in .NET Core?

          圖片
          6 I added .AddJsonFile("Connections.json", optional: true, reloadOnChange: true) in public Startup(IHostingEnvironment env) Connections.json contains: "ConnectionStrings": "DefaultConnection": "Server=(localdb)\mssqllocaldb;Database=DATABASE;Trusted_Connection=True;MultipleActiveResultSets=true", "COR-W81-101": "Data Source=DATASOURCE;Initial Catalog=P61_CAFM_Basic;User Id=USERID;Password=PASSWORD;Persist Security Info=False;MultipleActiveResultSets=False;Packet Size=4096;", "COR-W81-100": "Data Source=DATASOURCE;Initial Catalog=Post_PS;User Id=USERID;Password=PASSWORD;Persist Security Info=False;MultipleActiveResultSets=False;Packet Size=4096;", "MSEDGEWIN10": "Data Source=DATASOURCE; Initial Catalog=COR_Basic; Persist Security Info=False;Integrated Security=true;MultipleActiveResultSets=False;Packet Size=4096;Application Name="COR_Basic"", "server...
          閱讀完整內容

          Node.js Script on GitHub Pages or Amazon S3

          圖片
          0 I'm wondering if I can run a Node.js script in my Jekyll page from GitHub Pages or Amazon S3? I think it can't run on GitHub Pages since it doesn't support server side code. Not too sure. The code is below: var Airtable = require('airtable'); var base = new Airtable(apiKey: 'YOUR_API_KEY').base('appAnZVyYqusNPV5Q'); base('Invitee list').select( // Selecting the first 3 records in Complete list: maxRecords: 3, view: "Complete list" ).eachPage(function page(records, fetchNextPage) // This function (`page`) will get called for each page of records. records.forEach(function(record) console.log('Retrieved', record.get('Email')); ); // To fetch the next page of records, call `fetchNextPage`. // If there are more records, `page` will get called again. // If there are no more records, `done` will get called. fetchNextPage(); , function done(err) if (err) console.error(err); return; ); node.js ...
          閱讀完整內容

          Museum of Modern and Contemporary Art of Trento and Rovereto

          圖片
          Art museum in Rovereto TN, Italy Museum of Modern and Contemporary Art of Trento and Rovereto Museo d'arte moderna e contemporanea di Trento e Rovereto MART, Entrance Location Corso Angelo Bettini, 43, 38068 Rovereto TN, Italy Coordinates 45°53′38″N 11°02′42″E  /  45.8940°N 11.0450°E  / 45.8940; 11.0450 Coordinates: 45°53′38″N 11°02′42″E  /  45.8940°N 11.0450°E  / 45.8940; 11.0450 Type Art museum Director Gianfranco Maraniello Public transit access Trento train station. Taxis outside station. Website mart.trento.it The Museum of Modern and Contemporary Art of Trento and Rovereto (MART) ( Museo d'Arte Moderna e Contemporanea di Trento e Rovereto , in Italian) is a museum centre in the Italian province of Trento. The main site is in Rovereto, and contains mostly modern and contemporary artworks, including works from renowned Giorgio Morandi, Giorgio de...
          閱讀完整內容