Authentication

Authentication

Authentication and Authorization

Authentication: 认证

Authorization: 授权

HTTP headers

WWW-Authenticate

Syntax

WWW-Authenticate: <type> realm=<realm>[, charset="UTF-8"]

MDN Web Docs - WWW-Authenticate

Authorization

Syntax

Authorization: <type> <credentials>

MDN Web Docs - Authorization

Basic Scheme - RFC 7617

Bearer Scheme - RFC 6750

JSON Web Token

jwt.io

JSON Web Token - RFC 7519

Authentication in ASP.NET Core

Overview of ASP.NET Core authentication

密码安全

• 非对称加密传输（RSA）

• 哈希散列存储（MD5）

扩展

OAuth 2.0 - RFC 6749

Javascript Object Signing and Encryption (jose)