About token acquiring (client side VS server side)

  • 259 Views
  • Last Post 5 weeks ago
  • Topic Is Solved
Iaroslav posted this 08 May 2018

Dear GFS developers, 

 

We would like to clarify the authentication process.

 

From documentation (Security):

> This authentication step is a server to server call that should be made from your webserver to GFS' identity server (link)

 

Is it really necessary to make a server to server call to obtain a token for a widget? It looks like it is used only by the widget on the client side. It would be an uncommon practice to use our server for obtaining a token, and then the widget will use it to work with your server. There is no difference in security as long as we expose the token for a client.  

Do you have any special reasons for not revealing Client ID and Client Secret to the client (JS code)? Do we have to put additional restrictions on token acquitting process? 

 

Sincerely,

 

IAROSLAV BARANOV 

Software Engineer (EPAM System)

We develop the integration on behalf of The Perfume Shop

Order By: Standard | Newest | Votes
Simon Wilson posted this 08 May 2018

Hi Iaroslav,

The reason the token is authenticated server to server is that the client ID and secret are hidden this way, however if you do a client browser to server validation then the client ID and secret are visible to all who access the site and would then make the widget insecure. however when it is server to server authentication the client ID and secret are hidden on your server within the  files and the client browser does not see the ID or secret so the security cannot be breached on this.

 

Please let me know if you need any further assistance.

Kind regards

Simon

MaryHowle posted this 16 September 2020

In this present time, the richest people are those who are a builder. They used to build essaywriter.org such as big buildings which give them a lot of profit. But the point to ponder on is that they do not do any work and get such a large amount of money whereas the laborers who work behind the scene get some 10 percent of the profit.

assignmentdoer posted this 22 September 2020

interesting , great job and much obliged for sharing such a decent blog.

Economics Assignment Help

dissertationhouse posted this 22 September 2020

interesting , great job and much obliged for sharing such a decent blog.

Do My Dissertation For Me

wewriteessay posted this 22 September 2020

exceptionally decent… I truly like your blog…

Essay Writing Services

nickvoz posted this 5 weeks ago

Hi there! I just wanna say thanks for this forum, i didn't even think that something like that existed. So once again thank you! I will be glad if I help someone too. If you have problems writing all sorts of articles but you need it in your studies, I can suggest you contact them https://essaywriter.org/report-writing-help. Thanks a lot agains!

 

Close