Autentikasi JWT

JWT: login untuk mendapatkan JWT bertanda tangan, panggil endpoint yang dilindungi [Authorize] dan pemeriksaan role, rotasi refresh token, dan ambil token kedaluwarsa untuk pengujian negatif.

• GEThttps://api.testingapis.com/api/auth/jwt/adminAllow only JWTs with the admin roleAllow only JWTs with the admin role.
• GEThttps://api.testingapis.com/api/auth/jwt/expiredReturn a correctly signed JWT that expired an hour agoReturn a correctly signed JWT that expired an hour ago.
• POSThttps://api.testingapis.com/api/auth/jwt/loginLog in and receive a JWT access token and a refresh tokenLog in and receive a JWT access token and a refresh token.
• GEThttps://api.testingapis.com/api/auth/jwt/meReturn the claims of the current JWTReturn the claims of the current JWT.
• POSThttps://api.testingapis.com/api/auth/jwt/refreshExchange a refresh token for new tokensExchange a refresh token for new tokens.

curl -X GET "https://api.testingapis.com/api/auth/jwt/admin" \
  -H "Authorization: Bearer {{adminJwt}}"

{"message": "Welcome, admin. You passed the role check.", "username": "admin"}