DEV Community

Discussion on: Getting started with JWT authorization - .NET Core edition

Collapse
 
himanshu2454 profile image
Himanshu Chouhan

Any idea, what's the preferred choice for authentication/autherization on enterprise applications ?

I see alot ways floating around if search for similar topics like indentity, jwt, bearer I'm not sure they are all same or not, lol.

Collapse
 
bmi profile image
Benjamin Mikkelsen

Hi there, sorry for the late answer!

The enterprise applications I've been working on have primarily been using custom JWTs (like this example), Windows Authentication or Azure Active Directory - depending on the existing infrastructure of the company.

Bearer authentication/authorization can be implemented with JWTs. Some people refer to JWTs as 'JWT Bearer Access Tokens'. Which itself, usually, is an implementation of OAuth 2. JWT is a token format and OAuth 2 is a protocol that defines how tokens should be transferred.

There's no right or wrong when it comes to deciding upon authentication/authorization. It comes down to your specific use case and existing infrastructure :-)