Secure Web api second part.

Sourabh Dhiman

6y992AJAX

How to secure webapi with ajax request .With demo

9 Replies

Know the answer? Post it — somebody with the same question will find it here.

Jaimin Shethiya6y ago
Hi,

first you have to generate the JWT token for below code and after you have to used that JWT token in Bearer authentication for every api calling using ajax.

var login = { Username: "user", Password: "pwd" };
$.ajax({
url: '/api/token',
data: login, //data: JSON.stringify(login),
success: function(json) {
alert("Success", json);
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
alert(textStatus, errorThrown);
},
type: 'POST',
contentType: 'json',
});
0
Sourabh Dhiman6y ago
public IActionResult CreateToken([FromBody]LoginModel login)
{

Maybe not a api call .
Please you provide me full solution.
0
Sourabh Dhiman6y ago
Ok I will try this.
0
Jaimin Shethiya6y ago
can you please try this code for

var login = { Username: "user", Password: "pwd" };
$.ajax({
url: '/api/token',
data: login,
success: function(json) {
alert("Success", json);
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
alert(textStatus, errorThrown);
},
type: 'POST',
contentType: 'json',
});
0
Jaimin Shethiya6y ago
In this what you want to call?

public IActionResult CreateToken([FromBody]LoginModel login)
{
this api call or another
0
Sourabh Dhiman6y ago
https://yogeshdotnet.com/jwtjson-web-token-authentication-and-authorization-in-asp-net-core-2-1-with-example/

Please check this.
0
Jaimin Shethiya6y ago
Hello, can you please refer this example for JWT token "Bearer Authentication"

And url replace the your api endpoint.
0
Sourabh Dhiman6y ago
It's very usefull example but i want with API controller . And How to get JWT token.
0
Jaimin Shethiya6y ago
Hello Sourabh,

can you please check with below code

Basic authentication example
var username = "user";
var password = "pwd";
var url = 'mysite.com';
$.ajax({
url: url,
success: function(json) {
alert("Success", json);
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
alert(textStatus, errorThrown);
},
//headers: {'Authorization': 'Basic bWFkaHNvbWUxMjM='},
beforeSend: function (xhr) {
xhr.setRequestHeader ("Authorization", "Basic " + btoa(username + ":" + password));
},
type: 'GET',
contentType: 'json',
});

Bearer Authentication
var username = "user";
var password = "pwd";
var tokenValue = 'some value for authenticate your web api'
var url = 'mysite.com';
$.ajax({
url: url,
success: function(json) {
alert("Success", json);
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
alert(textStatus, errorThrown);
},
//headers: {'Authorization': 'Bearer ' + tokenValue},
beforeSend: function (xhr) {
xhr.setRequestHeader ("Authorization", "Bearer " + tokenValue));
},
type: 'GET',
contentType: 'json',
});

Let me know if you have needed any other help

Thanks
0