Gary Archer questions

Gary Archer answers

• Best strategy for storing and maintaining JWT refresh tokens in the database?
• How do I validate an msal token from Microsoft Single Sign-On in ASP.Net Core using JwtSecurityTokenHandler().ValidateToken
• AWS HTTP API Gateway jwt validation
• Do I generate a new PKCE challenge every time or is it something that can be stored?
• Could we make OAuth2Session refresh token x seconds before it expires?
• Use mkcert certificate for local testing of PWA
• Azure APIM : External Backend API Oauth2 authentication with Bearer token integration
• Getting a new refresh token with AD FS 4.0 (2016) or higher
• Is it okay to Cache verified JWT token to prevent repeated verification process in spring-boot application
• What should my OAuth2 Redirect URL be with an S3 static site frontend and an EC2 API backend?