D3FEND 技术详情
D3-TBA
定义
Token-based authentication is an authentication protocol where users verify their identity in exchange for a unique access token. Users can then access the website, application, or resource for the life of the token without having to re-enter their credentials.
父技术
子技术
无
关联构件
AccessToken
Access Token
In computer systems, an access token contains the security credentials for a login session and identifies the user, the user's groups, the user's privileges, and, in some cases, a particular application. Typically one may be asked to enter the access token (e.g. 40 random characters) rather than the usual password (it therefore should be kept secret just like a password).
语义关系
出向kb referenceReference - Identity Providers: What is Token Based Authentication
出向usesAccess Token