{"componentChunkName":"component---src-templates-blog-list-template-js","path":"/engineering/42","result":{"data":{"allMarkdownRemark":{"edges":[{"node":{"excerpt":"Cocoapod is a package dependency manager for Objective-C and Swift projects with XCode. Those Languages are used to make applications that…","fields":{"slug":"/engineering/what-is-cocoapods-and-installation/"},"html":"

Cocoapod is a package dependency manager for Objective-C and Swift projects with XCode. Those Languages are used to make applications that run iOS, macOS, watchOS and tvOS. Cocoapods also acts as a coding hub to share your code with other people. That way we as a community of coders don’t have to “re-invent the wheel” to tackle problems that have already been solved.

\n

Installing Cocoapods

\n

Cocoapods is built on top of Ruby, so you would need to install that in your system before using Cocoapods.
\nThen, you can install using this command:
\nsudo gem install cocoapods

\n

Using Cocoapods

\n

Open Terminal and go to your XCode project directory.
\nAfterwards, run this command:
\npod init

\n

Then a Podfile is generated, configure the file, like so:

\n
platform :ios, '8.0'  \nuse_frameworks!  \ntarget 'MyApp' do  \n pod 'AFNetworking', '~> 2.6'   pod 'ORStackView', '~> 3.0'  \n pod 'SwiftyJSON', '~> 2.3'\nend
\n

Where ‘MyApp’ is your application project and the ‘pod’ inside it are the libraries that you want to use! If you need to control which version of those libraries you can manipulate it on the right side of the config.

\n

Updating Cocoapods

\n

If you want to keep up to date with the codes shared in cocoapods you can run the command:
\npod update

\n

That way any latest bug fixes, enhancement and features on the new version will be downloaded!
\nTo see which Libraries that you want to utilize, head over to cocoapods and search over there!

\n

Personal favorites pods

\n

Realm : For Managing Databases in iOS application

\n

Alamofire : For All of your Networking Needs

\n

Eureka : For Simplified UI and Forms

\n

And of course our:
\nLoginRadiusSDK : For our API Calls to Manage your Login System

\n","frontmatter":{"date":"September 06, 2017","updated_date":null,"description":null,"title":"Cocoapods : What It Is And How To Install?","tags":["Swift","Objective-C","xcode"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.4184397163120568,"src":"/static/44cf00aba943bff992ac72c888078a70/58556/cocoapods-orange-on-grey.webp","srcSet":"/static/44cf00aba943bff992ac72c888078a70/61e93/cocoapods-orange-on-grey.webp 200w,\n/static/44cf00aba943bff992ac72c888078a70/1f5c5/cocoapods-orange-on-grey.webp 400w,\n/static/44cf00aba943bff992ac72c888078a70/58556/cocoapods-orange-on-grey.webp 800w,\n/static/44cf00aba943bff992ac72c888078a70/99238/cocoapods-orange-on-grey.webp 1200w,\n/static/44cf00aba943bff992ac72c888078a70/7c22d/cocoapods-orange-on-grey.webp 1600w,\n/static/44cf00aba943bff992ac72c888078a70/5d27a/cocoapods-orange-on-grey.webp 2338w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Thompson Sanjoto","github":null,"avatar":null}}}},{"node":{"excerpt":"the guide to NPMWhat is This, and Why Should I Care? NPM is a package manager for javascript. It is used to share and distribute code…","fields":{"slug":"/engineering/node-package-manager-npm/"},"html":"
\"theWhat is This, and Why Should I Care?
\n

NPM is a package manager for javascript. It is used to share and distribute code amongst the coding community. There are over half a million packages for free developed and shared to help your JavaScript development.

\n

To discover packages click here

\n
How Do I Install NPM?
\n

NPM can easily be installed by going to the node.js website. Just click on the link to download an executable file which will install the package manager for you.

\n

(If you have brew on Mac or Chocolatey on Windows installed, it is even easier just run the command:

\n

[code]brew install npm[/code]

\n

Or

\n

[code]choco install nodejs[/code]

\n
How Do I Install Packages?
\n

Head over here to search for your package. Once you’ve found it, type in your console:

\n

[code]npm install -g[/code]

\n

Since NPM packages are open-source, be wary that some of the packages may not be built correctly. A good way to tell would be viewing the top of the page for any errors.

\n

\n
How Do I Keep My Packages Up-To-Date?
\n

To update the npm packages, simply run:

\n

[code]npm update -g[/code]

\n

This will update all your outdated packages to the latest.

\n\n\n

Detail: Emulates a web-server for client-side testing

\n
\n\n

Detail: Assists in setting up a REST APIs to test on your local server

\n
\n\n

Detail: Unit testing for web-development. Very useful in testing “code coverage” (It tells you where your code is not being tested in a nice HTML file)

\n
\n\n

Detail: For existing customers, simplifies calls to our server for easy customizability

\n
\n","frontmatter":{"date":"August 04, 2017","updated_date":null,"description":null,"title":"Node Package Manager (NPM)","tags":["NodeJs","NPM"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/4caf8328a2c92711c224c09a0b6c405f/58556/the-guide-to-NPM.webp","srcSet":"/static/4caf8328a2c92711c224c09a0b6c405f/61e93/the-guide-to-NPM.webp 200w,\n/static/4caf8328a2c92711c224c09a0b6c405f/1f5c5/the-guide-to-NPM.webp 400w,\n/static/4caf8328a2c92711c224c09a0b6c405f/58556/the-guide-to-NPM.webp 800w,\n/static/4caf8328a2c92711c224c09a0b6c405f/99238/the-guide-to-NPM.webp 1200w,\n/static/4caf8328a2c92711c224c09a0b6c405f/90fb1/the-guide-to-NPM.webp 1500w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Eric Chan","github":null,"avatar":null}}}},{"node":{"excerpt":"These days SSL is a must-have element for websites, but SSL certificates are costly and range from $30 to $500 per year for a single website…","fields":{"slug":"/engineering/get-your-free-ssl-certificate/"},"html":"

These days SSL is a must-have element for websites, but SSL certificates are costly and range from $30 to $500 per year for a single website. Don’t fret! You can get a FREE SSL certificate! Through “Let's Encrypt\", a free, automated, and open certificate authority, you will be able to acquire the necessary certificate to enable SSL on your website. Check out the below steps you can follow to get an SSL certificate for your site today.

\n

To obtain this certificate, you will first need to prove ownership of the domain. There are two requirements that you need to meet in order to generate a certificate from “Let's Encrypt”:

\n

Http-01:
\nYou will need to setup a directory on your web server's root, and the name of this directory should be “.well-know” and with a “acme-validation” directory included within this. Inside these directories, create a file containing the random string that was provided by the ACME server and this file should serve content which is the random string included in the doc.

\n

Sample Structure

\n
/.well-known/acme-validation/<random file name provided by ACME>
\n

Dns-01:

\n

You will need to create a .TXT record on the subdomain _acme-challenge. For instance, if you would like to obtain an SSL for the domain “example.com”, then you will need to setup a subdomain on this domain - _acme-challenge.example.com - and the content of the .TXT record will be a random string provided by the ACME server.

\n

Now that you have everything setup, how do you get your FREE SSL? Below, we will go over the various ways to enable SSL for free on your website:

\n

1. Certbot : certbot is a Linux utility that is simple yet powerful. This tool doesn't share private keys with any servers, and it keeps your private key on the client that is being used to generate the cert.  You can install certbot with the following command on ubuntu:

\n
$ sudo add-apt-repository ppa:certbot/certbot\n$ sudo apt-get update\n$ sudo apt-get install certbot
\n

The certbot site has even more details and information for installing this on other systems.

\n

Once installed, open the DNS Manager (must do!) and call the following command to get the SSL certificate for your domain.

\n
sudo certbot --text --agree-tos --email <YOUR EMAIL ID> -d <YOUR DOMAIN> --manual --preferred-challenges dns --expand --renew-by-default  --manual public-ip-logging-ok certonly
\n

This command will request that you add the .TXT record on the subdomain _acme-challenge. Once this is added, simply press any key to generate the SSL certificate. It will show the locations of the certified file.

\n

2. Online using https://www.sslforfree.com/ : This is also a non-profit site and you can get SSL without any installation; just follow the steps to set up the ACME compliant site structure. They provide an easy step-by-step guide for generating the SSL certificate. Once you work through the guide, you will be able to download a copy of your certificate and include on your webserver.

\n

3. Other ways : There are lots of other ways to get the “Let's Encrypt” SSL. This page contains a list of ACME clients and libraries, so you can choose to work with whichever one that best suits your needs.

\n","frontmatter":{"date":"July 13, 2017","updated_date":null,"description":null,"title":"Get your FREE SSL Certificate!","tags":["Engineering","SSL"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1,"src":"/static/9dac90102c33db64e0dc88c91e3138a2/a3e81/letsencrypt.webp","srcSet":"/static/9dac90102c33db64e0dc88c91e3138a2/61e93/letsencrypt.webp 200w,\n/static/9dac90102c33db64e0dc88c91e3138a2/1f5c5/letsencrypt.webp 400w,\n/static/9dac90102c33db64e0dc88c91e3138a2/a3e81/letsencrypt.webp 512w","sizes":"(max-width: 512px) 100vw, 512px"}}},"author":{"id":"Kundan Singh","github":null,"avatar":null}}}},{"node":{"excerpt":"jCenter is the public repository hosted at bintray that is free to use for open source library publishers. It is the largest repository in…","fields":{"slug":"/engineering/how-to-use-jcenter-dependencies-in-android-studio/"},"html":"

jCenter is the public repository hosted at bintray that is free to use for open source library publishers. It is the largest repository in the world for Java and Android OSS libraries, packages and components. All the content in JCenter is served over a CDN, with a secure HTTPS connection. In this article, we’ll discuss how to make use of jCenter dependencies in Android Studio.

\n

Prerequisites

\n\n

If you don’t have Android Studio installed, you can download from the following link:

\n

Android Studio

\n

After successfully installing Android Studio, you can open an existing project or create a new project to start with.

\n

Usage

\n

After opening or creating a new project, you can find two files named “build.gradle” under Gradle Scripts section in the left pane. The first one will be suffixed with “Project” and another with “Module”. We’ll start with the “Project” one.

\n

Add jCenter repository in project’s build.gradle file as shown below and sync your project:

\n
allprojects {\n   repositories {\n       jcenter()\n\t   . . .\n   }\n}
\n

On successful sync, you’re now able to add any Android dependency hosted on jCenter repository. The dependency will be added to “Module” build.gradle. It’s also known as app’s build.gradle.

\n

For example, if you want to add LoginRadius dependency/library, you can add in app’s build.gradle as follows and sync your project:

\n
compile 'com.loginradius.android:androidsdk:3.3.1'
\n

If all the steps are followed successfully, you’re now able to add a jCenter dependency in Android Studio.

\n","frontmatter":{"date":"July 11, 2017","updated_date":null,"description":"Learn how to make use of jCenter dependencies in Android Studio.","title":"jCenter Dependencies in Android Studio","tags":["JCenter","Android"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7699115044247788,"src":"/static/a9a8e082bff7f37ce001b37deba19d8c/58556/jCenter.webp","srcSet":"/static/a9a8e082bff7f37ce001b37deba19d8c/61e93/jCenter.webp 200w,\n/static/a9a8e082bff7f37ce001b37deba19d8c/1f5c5/jCenter.webp 400w,\n/static/a9a8e082bff7f37ce001b37deba19d8c/58556/jCenter.webp 800w,\n/static/a9a8e082bff7f37ce001b37deba19d8c/99238/jCenter.webp 1200w,\n/static/a9a8e082bff7f37ce001b37deba19d8c/135cd/jCenter.webp 1280w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Hitesh Pamnani","github":null,"avatar":null}}}},{"node":{"excerpt":"Maven is a project build management software, it means it Let's you define your project dependencies, features, and behaviors. To do this…","fields":{"slug":"/engineering/how-to-use-maven-dependency-in-eclipse/"},"html":"

Maven is a project build management software, it means it Let's you define your project dependencies, features, and behaviors. To do this, Maven downloads plugins and dependencies for various online repositories. People who want to share their libraries, develop using Maven and upload the binaries in a repository. In this article, we’ll discuss how to configure and use Maven dependency.

\n

Prerequisites:

\n\n

Install the Maven support for Eclipse (m2e)

\n

Most Eclipse downloads include the Maven tooling already. If it is missing in your installation, you can install it via the main update of your release via Help > Install New Software. The following listing contains the update site for the Neon release and an update site maintained by the m2e project.

\n\n

For the usage of Maven for Java projects, you only need the m2e component. For Java web development you also want the m2e-wtp entry.

\n

Download the Maven index

\n

By default, the Maven tooling does not download the Maven index for the Eclipse IDE. Via the Maven index, you can search for dependencies, select them and add them to your pom file. To download the index, select Windows > Preferences > Maven and enable the Download repository index updates on startup option.

\n

After changing this setting, restart Eclipse. This triggers the download of the Maven index. You may want to remove this flag after restarting to avoid network traffic at every start of Eclipse.

\n

Create Maven project

\n

Create a new Maven project via File > New > Other… > Maven > Maven Project.

\n

On the first wizard page, you can select if you want to create a simple project.

\n

After creating the Maven project, a pom.xml is generated. You can find the file in Project Explorer. A Project Object Model or POM is the fundamental unit of work in Maven. It is an XML file that contains information about the project and configuration details used by Maven to build the project. It contains default values for most projects.

\n

Now, you can add a dependency in pom.xml. For example, if you want to add LoginRadius for Java library/dependency, you can add as follows:

\n
<dependencies>\n    <dependency>\n        <groupId>com.loginradius.sdk</groupId>\n        <artifactId>java-sdk</artifactId>\n        <version>11.0.0</version>\n    </dependency>\n    ......\n</dependencies>
\n

You should now be able to quickly import any libraries that you want o use in your project via Maven.

\n","frontmatter":{"date":"July 11, 2017","updated_date":null,"description":"Learn step by step setting up and resolution of maven dependency using eclipse IDE.","title":"Maven Dependency in Eclipse","tags":["Java","Maven","Eclipse"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7699115044247788,"src":"/static/6df6019580145a8674f864bc824a80fc/58556/maven.webp","srcSet":"/static/6df6019580145a8674f864bc824a80fc/61e93/maven.webp 200w,\n/static/6df6019580145a8674f864bc824a80fc/1f5c5/maven.webp 400w,\n/static/6df6019580145a8674f864bc824a80fc/58556/maven.webp 800w,\n/static/6df6019580145a8674f864bc824a80fc/99238/maven.webp 1200w,\n/static/6df6019580145a8674f864bc824a80fc/135cd/maven.webp 1280w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Giriraj Yadav","github":null,"avatar":null}}}},{"node":{"excerpt":"Bower is a popular package manager to help you quickly deploy components. In this article I'm going to show you how to install Bower and how…","fields":{"slug":"/engineering/how-to-use-bower-to-install-bootstrap/"},"html":"

Bower is a popular package manager to help you quickly deploy components. In this article I'm going to show you how to install Bower and how to use it to install Bootstrap.

\n

Pre-requisites: To install Bower you must first have Node.js and npm (another package manager) installed, your computer may have shipped with these pre-installed. To check if you have npm, open your command-line tool and type:

\n
npm -v
\n

If you do not get a version number, you may need to install npm which comes pre-packaged with Node.js

\n

You can find Node.js along with instructions on how-to install it here: NodeJS

\n

Windows Users Only: If you're a Windows user make sure you have Git for Windows installed to work with the Windows Command Prompt with Checkout Windows-Style and commit Unix-style line endings. You can find more information on that here: Git for Windows

\n

Installation:

\n

Provided that you have both Node.js and npm installed, run the following command in your Command-line tool:

\n
npm install -g bower
\n

Usage:

\n

Once Bower is installed it's as easy as going to your project folder in Command-line and typing:

\n
bower install bootstrap
\n

followed by:

\n
bower install jquery
\n

This will install the files required for Bootstrap in the newly created 'bower_components' folder.

\n

In this folder you will have 2 new folders 'bootstrap' and 'jquery'.

\n

The next step is to include the files for both jQuery and Bootstrap into your project file(s).

\n

...And that's it, you're good to go.

\n

Updating

\n

If you need to update a project and are unsure which bower packages you have installed that might need an update, you can type

\n
bower list
\n

in your project directory for a listing of packages you installed via Bower and which ones are due for an update.

\n

in this case if we wanted to update our bootstrap install we would do:

\n
bower update bootstrap
\n

Making your Bower configurations portable

\n

Once you have figured out your configurations and installed all of your desired Bower packages you can use:

\n
bower init
\n

Follow the steps provided in your Command-line.

\n

This will initialize a bower.json file which will store your configurations.

\n

Once you have your Bower.json file you can move it around to other locations or projects and you can get Bower to reinstall all of your packages and configurations by typing:

\n
bower install
\n

This will get Bower to create another 'bower_components' folder with the same packages and configurations specified in your bower.json file.

\n

For further information on using or configuring Bower You can checkout the official website

\n","frontmatter":{"date":"July 05, 2017","updated_date":null,"description":"Learn how the Bower package manager helps into quick components deploy and install Bootstrap using Bower","title":"Install Bootstrap with Bower","tags":["Bootstrap","Bower"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.1363636363636365,"src":"/static/d319266a1157fbb5549a7b376455d29a/58556/bower-logo.webp","srcSet":"/static/d319266a1157fbb5549a7b376455d29a/61e93/bower-logo.webp 200w,\n/static/d319266a1157fbb5549a7b376455d29a/1f5c5/bower-logo.webp 400w,\n/static/d319266a1157fbb5549a7b376455d29a/58556/bower-logo.webp 800w,\n/static/d319266a1157fbb5549a7b376455d29a/cc834/bower-logo.webp 1024w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Pascal Noel","github":null,"avatar":null}}}}]},"markdownRemark":{"excerpt":"Introduction Ever wondered how apps like Spotify, Netflix, or Slack manage seamless login experiences across devices? Many of them use JWT…","fields":{"slug":"/engineering/how-to-integrate-jwt/"},"html":"

Introduction

\n

Ever wondered how apps like Spotify, Netflix, or Slack manage seamless login experiences across devices? Many of them use JWT, or JSON Web Tokens, a compact, stateless method for securely transmitting user identity and session data across services.

\n

With JWT token authentication, identity information is embedded in a signed token, allowing you to maintain user sessions without server-side storage. This approach is highly scalable and ideal for modern architectures like SPAs, mobile apps, and microservices.

\n

In this blog, we’ll walk you through what is JWT, why use it, and how to implement JWT authentication using LoginRadius.

\n

You’ll learn what JWT is, why it’s effective, and how it works in real-world applications. We'll cover both integration methods (IDX and Direct API), generating your signing key, managing sessions, storing the JWT token securely, and applying best practices throughout.

\n

Whether you're a developer, product manager, or IAM architect, this guide offers a complete foundation for implementing JWT token authentication into your application stack.

\n

What is JWT?

\n

JSON Web Token (JWT) is an open standard (RFC 7519) used to transmit information securely between parties as a JSON object. It’s compact, self-contained, and digitally signed, making it a reliable format for authentication and authorization across modern applications.

\n

A JWT consists of three parts:

\n
    \n
  1. Header – Contains metadata like the type of token and signing algorithm (e.g., HS256).
    2. \n
  2. Payload – Stores the actual data or “claims,” such as user ID, roles, and token expiry.
    3. \n
  3. Signature – A cryptographic hash that ensures the token hasn’t been tampered with.
    4. \n
\n

Example of a token structure:

\n

<base64Header>.<base64Payload>.<signature>

\n

Why Use JWT?

\n\n

How JWT Works?

\n

\"Flowchart

\n
    \n
  1. A user logs in with credentials.
    2. \n
  2. Your app (or identity provider like LoginRadius) issues a signed JWT.
    3. \n
  3. The client stores the token and sends it with each request (usually in the Authorization header).
    4. \n
  4. The server validates the token’s signature and claims.
    5. \n
  5. If valid, access is granted — without any session stored on the backend.
    6. \n
\n

JWT simplifies identity verification, especially when you're building apps that talk to APIs or need to scale without centralized session storage.

\n

JWT Authentication with LoginRadius: Overview

\n

LoginRadius provides robust support for JWT (JSON Web Token) authentication, which allows for flexible and secure access control across different digital platforms. Whether you're building a fully custom identity flow or using a pre-built interface, the platform supports various integration approaches depending on your architecture.

\n

If you're looking to understand how to implement JWT token authentication effectively, LoginRadius offers two primary implementation models that cater to different levels of customization and control:

\n

1. IDX Implementation – JWT through a Hosted Login Page

\n

The IDX-hosted login approach enables secure, standards-compliant, JWT-based authentication without requiring you to build a custom login interface. This is a strategic option for fast, compliant, and user-friendly deployments.

\n\n

Configuration Steps:

\n
    \n
  1. Enable JWT Login
    2. \n
  2. Go to authentication configuration settings and enable JWT Login in the Admin Console.
    3. \n
\n

\"Screenshot

\n
    \n
  1. Specify your signing algorithm and expiry policy, and define your JWT Secret Key.
    2. \n
  2. Input a secure JWT signing key.
    3. \n
  3. Specify token expiry duration (e.g., 15–60 minutes)
    4. \n
  4. Select the desired algorithm —HS256 for symmetric signing (same key signs and verifies)
    5. \n
  5. RS256 for asymmetric signing, where LoginRadius securely stores the private key used to sign the JWT.
    6. \n
  6. Your app or backend service uses the public key to validate the token signature.
    7. \n
  7. LoginRadius provides a JWKS (JSON Web Key Set) endpoint to dynamically fetch and rotate public keys, ensuring trust without key exposure.
    8. \n
  8. Update IDX Template for Callback
    9. \n
  9. Modify your IDX login page template to retrieve the JWT post-login. You can access the token via redirect URL parameters or secure JavaScript callbacks.
    10. \n
\n

Example Response:

\n

{

\n

\"access_token\": \"eyJhbGciOiJIUzI1NiIsInR...\",

\n

\"expires_in\": 1800

\n

}

\n

This integration approach works best for all teams that want effective identity workflows without the complexity of building proprietary login screens, something that is crucial for customer portals, onboarding of mobile applications, and even managing access for business partners.

\n

2. Direct API Implementation – Self Managed Login

\n

If you’re building a custom login UI or working in a headless environment, LoginRadius lets you generate and handle JWTs directly through its Authentication APIs. Here’s how you can programmatically perform token authentication using the classic method:

\n\n

Configuration Steps:

\n

Step 1: Authenticate via API:

\n\n

Include the user’s credentials (email + password) in the request body.

\n

Step 2: Get JWT in Response

\n\n

{

\n

\"access_token\": \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\",

\n

\"expires_in\": 3600

\n

}

\n

Step 3: JWT Decoding and Validation

\n\n

Step 4: Set Custom Claims (Optional)

\n

With LoginRadius, it is possible to customize the payload to include user roles and/or any additional metadata. You can set custom JWT claims on the Admin Console.

\n

With this method, you have complete customization over login flows while using LoginRadius to issue signed JWTs for user session management.

\n

NOTE- With either method, LoginRadius ensures that JWTs are securely signed, optionally short-lived, and compatible with standard token validation libraries, making integration seamless for everyone.

\n

To get started with JWT implementation, you can read our complete developer documentation.

\n

Hosted Login vs Direct API

\n

\"Illustration

\n

What is Session Management and How It Works with JWT

\n

Session management is how your app keeps track of a user after they log in so they don’t have to prove who they are with every request.

\n

In traditional apps, sessions are stored on the server using session IDs. Every time a request comes in, the server checks that session ID to verify the user.

\n

In modern apps, especially SPAs and APIs, JWTs are used to manage sessions without needing server-side storage; this is called stateless session management. The token itself carries the user’s identity, roles, and expiration details. As long as the token is valid, the user stays logged in.

\n

Good session management ensures:

\n\n

How LoginRadius Handles Session Management with JWT:

\n
    \n
  1. \n

    User Logs In

    \n\n
    2. \n
  2. \n

    Client Stores the Token

    \n\n
    3. \n
  3. \n

    Access Token Expiry

    \n\n
    4. \n
  4. \n

    Token Renewal

    \n\n
    5. \n
  5. Logout and Token Revocation Strategy
    6. \n
\n

When the user logs out, both the access token and refresh token should be cleared from client storage.

\n\n

Combining these strategies gives you greater control over token misuse and enables a robust, enterprise-grade logout flow.

\n

\"illustration

\n

How to Store JWT Tokens?

\n

When you implement JWT-based authentication, the client (browser or mobile app) needs a way to store the access token and, optionally, the refresh token after they are issued by the authentication server. This stored token is then attached to every subsequent request to prove the user's identity.

\n

Choosing where to store the JWT is a crucial security decision. The most common storage options are:

\n\n

Each option has trade-offs between security, accessibility, and persistence, and the right choice depends on your application's architecture and threat model.

\n

Recommended Storage Strategy

\n\n

Best Practices for Storing JWTs

\n
    \n
  1. Never store sensitive tokens (like refresh tokens) in localStorage or sessionStorage.
    2. \n
  2. Use Secure and HttpOnly flags with cookies to prevent JavaScript access and ensure transmission only over HTTPS.
    3. \n
  3. Set the SameSite=Strict or Lax attribute on cookies to protect against CSRF.
    4. \n
  4. Use short-lived access tokens and rotate refresh tokens regularly.
    5. \n
  5. Implement CSP (Content Security Policy) to reduce XSS risk.
    6. \n
  6. Avoid storing any tokens in frontend code (e.g., hardcoded in JS files).
    7. \n
\n

Conclusion

\n

JWT authentication with LoginRadius offers a modern, stateless approach to managing sessions across distributed systems. The IDX integration is ideal for rapid deployment, while the Direct API model is best for organizations needing deep customization and integration flexibility.

\n

With robust token signing, refresh capabilities, and centralized control, LoginRadius provides a future-ready foundation for secure, scalable identity architecture. Contact us to know more about JWT authentication and implementation guide.

\n

FAQs

\n

1. What is JWT authentication used for?

\n

A: JWT authentication securely verifies user identities, enabling stateless session management across web, mobile apps, and microservices without server-side session storage.

\n

2. How does LoginRadius simplify JWT integration?

\n

A: LoginRadius simplifies JWT integration by offering hosted IDX login pages and direct API-based authentication methods, enabling rapid deployment and deep customization.

\n

3. Is JWT authentication secure?

\n

A: Yes, JWT authentication is secure when implemented with best practices like short-lived tokens, secure storage methods, signature validation, and refresh token rotation.

\n

4. Can JWT tokens be revoked with LoginRadius?

\n

A: Yes, LoginRadius allows revocation of JWT refresh tokens explicitly, and supports strategies like short-lived tokens and key rotation to manage token lifecycles securely.

\n","frontmatter":{"date":"April 15, 2025","updated_date":null,"description":"Discover JWT (JSON Web Token) authentication, its advantages, and how to integrate it seamlessly using LoginRadius' hosted IDX and Direct API methods for secure, scalable identity management.","title":"JWT Authentication with LoginRadius: Quick Integration Guide","tags":["JWT","JSON Web Token","Authentication","Authorization"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":0.7782101167315175,"src":"/static/4cedb7829f98208cbc6d5a9aea4e983d/58556/how-to-integrate-jwt.webp","srcSet":"/static/4cedb7829f98208cbc6d5a9aea4e983d/61e93/how-to-integrate-jwt.webp 200w,\n/static/4cedb7829f98208cbc6d5a9aea4e983d/1f5c5/how-to-integrate-jwt.webp 400w,\n/static/4cedb7829f98208cbc6d5a9aea4e983d/58556/how-to-integrate-jwt.webp 800w,\n/static/4cedb7829f98208cbc6d5a9aea4e983d/1cc9f/how-to-integrate-jwt.webp 896w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Kundan Singh","github":null,"avatar":null}}}},"pageContext":{"limit":6,"skip":246,"currentPage":42,"type":"//engineering//","numPages":53,"pinned":"5c425581-f474-5ae9-abe7-cf5342db2aaa"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}