How to transfer a JWT token at each requesto when using Razor (.NET CORE 2.2 MVC)

Question

I want to use JWT authorization for .net core MVC project. I've found a number of examples of how to return a JWT token when a user logs in. However, there are only a few examples of how to transmit a token at each request from the header.

I found example with AJAX:

$.ajaxSetup({ headers: { "Authorization": "Bearer " + accessToken } });

Simple Authentication using Jwt in dot net core MVC

How to use JWT in MVC application for authentication and authorization?

Is this the right way to transfer a JWT token? Do I always have to use AJAX?

Answer 1

The code samples in your links are using Ajax to access the protected resources/apis . You can also pass the bearer token in headers to make api calls on server side :

HttpClient client = new HttpClient();
HttpRequestMessage request = new HttpRequestMessage(HttpMethod.Get, "APIurl");
request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", "YourAccessToken");
HttpResponseMessage response = await client.SendAsync(request);


if (response.IsSuccessStatusCode)
{

    String responseString = await response.Content.ReadAsStringAsync();

    ...
}

Answer 2

There is no such thing as JWT authorisation.

JWT tokens are just a format for distributing signed claim-sets.

The correct way of passing tokens around depends on many factors, such as where you are in an oauth flow, if the transport is encrypted, if the tokens contain personal info, and if your front end is spa, native etc