User name password core asp.net web API authentication, the caller is passed cleartext passwords? How to avoid the plaintext transfer

CodePudding user response:

The original password encryption transmission, server for encryption and authentication

CodePudding user response:

references in the 1st floor death loners response:

encryption transmission, server to encrypt the original password and then verify

No dice

CodePudding user response:

Aes encryption base64 encryption

CodePudding user response:

This requires the caller according to the unified algorithm encryption

CodePudding user response:

Encryption, in front of the background to decrypt

CodePudding user response:

HTTPS

CodePudding user response:

There is no need to use JWT

CodePudding user response:

Passwords can be converted to md5 first, and then with the user encryption, after the success of the interface validation, return a string of token, behind a token call interface

CodePudding user response:

refer to the eighth floor ahking response:

there is no need to use JWT

This have what relation with JWT