This is a presentation on AngularJS Single Page Application Jason Web Token Management. During the presentation we take a look at a NodeJS server application with both secured and unsecured APIs. We work on enhancement to the client application, so that it can manage the jwt token by looking at the following areas:
After login read token from header
Decode (base64) the second segment (payload)...
Showing posts with label oauth. Show all posts
Showing posts with label oauth. Show all posts
12/27/15
API OAuth Token Access-Control-Allow-Credentials header is empty
When implementing an Azure API App using MVC Web API with OAuth Bearer Token Authorization, we came across this error:
Response to preflight request doesn't pass access control check: Credentials flag is 'true', but the 'Access-Control-Allow-Credentials' header is ''. It must be 'true' to allow credentials. Origin 'http://domain.com' is therefore not allowed access.
This...