Token Authentication

Question

Jassim Al Rahma 1,616

Hi,

How does Token Authentication if I want to have my own Xamarin Auth app, similar to Microsoft Auth, Authy, etc?

Where can I find more resources?

is there a standard API calls for it? because it seems that you can add any app on Authy for example and it will automatically work.

Kindly advise.

Thanks,
Jassim

JarvanZhang 23,971 Reputation points

2021-10-07T07:06:22.177+00:00

Hi, assimAlRahma-9056. Try using WebAuthenticator class to add user authentication. The WebAuthenticator class supports to use your own web service for authentication. For more details, please refer to this doc: https://learn.microsoft.com/en-us/xamarin/essentials/web-authenticator?tabs=android

1 answer

JarvanZhang 23,971 Reputation points

2021-10-07T07:06:22.177+00:00

Hi, assimAlRahma-9056. Try using WebAuthenticator class to add user authentication. The WebAuthenticator class supports to use your own web service for authentication. For more details, please refer to this doc: https://learn.microsoft.com/en-us/xamarin/essentials/web-authenticator?tabs=android

Answer 1

Bruce (SqlWork.com) 78,006 Volunteer Moderator

tokens are passed with the Authorization http header

    Authorization: Bearer <token value>

the server should verify the token is valid typically with some encrypted known value.

typically you supply an api to generate a token. a internet standard for the api is oauth:

a common bearer token format is jwt:

Jassim Al Rahma 1,616 Reputation points

2021-10-06T22:24:06.987+00:00

but how do you add the services? for example, if you use Authy, all you need is to scan the QR code, same process for all apps, and then it will be just added.. similarly, you can add the service to the Microsoft Auth app...
Jassim Al Rahma 1,616 Reputation points

2021-10-10T11:53:12.71+00:00

for example in below image its asking for the key? How can I generate and read the key for my app? and is it unique?
JarvanZhang 23,971 Reputation points

2021-10-11T06:48:05.083+00:00

The key is generated by the web server, scanning the qr code is just to get the saved info of qr code. The key works like an id created by the server, the id is unique.
Jassim Al Rahma 1,616 Reputation points

2021-10-11T07:02:11.42+00:00

but that does mean I can generate any key and let Authy scan it or there is a standard way of generating the key?
JarvanZhang 23,971 Reputation points

2021-10-11T07:17:30.53+00:00

The key is the created by the web server, and you can determine how to generate the key.