Securing JWT token in page url

Jira Development Jira Cloud
, , , ,
1

We are passing JWT token as query parameter in the url to authenticate ajax request in the redirected page as shown below.

AP.navigator.go(‘addonModule’, { addonKey: ‘addon_key_here’, moduleKey: ‘module_key_here’, customData: {id: “10”, jwt: token_here}});

But it is easily accessible over the query parameter. We want to secure it from the user level. Is there any way/option to pass JWT token in a secure/hidden manner?

1 Like
2

@hariprasath, if you need a JWT token, perhaps you could use AP.context.getToken()?

If you have some other use case, it sounds like you should probably store the data on your own servers.

1 Like
3

Hello @epehrson,

Now I am able to generate JWT token and authenticate every request in redirected page too.

Cheers,
Hari Prasath P