how to send jwt authentication token in a rest request in asp.net core

Question

Can someone tell me how to send jwt authentication token for every rest request send from asp.net core to the web APi, Does there is need to create a secret key to sign the token signature? Can we just send the token without signing the token.

score 0 · Answer 1 · edited Oct 07 '21 at 11:10

This is very broad question.

Short answers:

Tokens are usually sent in cookies. Certain solutions also store tokens in browser localstorage or sessionstorage and then add the token in every request header
Yes, signing the token is mandatory. Otherwise, the server won't have a way to determine if the token has been tampered by an attacker or client. Signing is required for security

But there are much more to it. Refer to the following for details:

how to send jwt authentication token in a rest request in asp.net core

1 Answers1