Home/ Questions/Q 9031169
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-16T07:39:51+00:00

I have a REST Jersey web service. My question is about the answer of

  • 0

I have a REST Jersey web service.

My question is about the answer of this question, please check;

token based authentication in php

In that answer its mentioned that;

“It then sends a hash of this token and certain characteristics of the request to authenticate the request, e.g. sha1(Token + Timestamp + Request URL + Request Body). Your server can validate this without the client having to send the token in plain text on each request.”

Can anyone explain how can the server validate “without the client having to send the token in plain text on each request” ? Client should to send token each time to server?

Another question is, once the server receives a hash of this token(which includes timestamp and userid..etc) How will server identify the user from this token without having a look table or DB where tokens are stored?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    For the first question: the client can send a hashed version of the token and the server compares hashed value with the value received from the client.

    For the second question: you can keep a mapping between token and user in memory or on disk or wherever you think appropriate.

    • 0