Identity and Authentication - Implementing Auth0

第三方验证图

The front-end interact with a third party service to provide the login screen, and perform the authentication. The software will direct our clients to a hosted page provided by Auth0. On this page, the user can perform one of many types of authentication including a username and password, but also single sign-on or other identity providers. Auth0 is entirely responsible for the login action within their service. Once the login is complete, Auth0 will redirect our user back to our main front-end complete with the JWT (Json Web Tokens) of that authenticated request. That JWT can be passed along to our various services which need to authenticate our user. Those servers will interact with Auth0 account to validate that those JWTs are authentic and have not been tampered with.

---