Skip to content

Commit a0faf06

Browse files
damienbodhalter73
andauthored
Update aspnetcore/security/authentication/configure-jwt-bearer-authentication.md
Co-authored-by: Stephen Halter <[email protected]>
1 parent 69f8103 commit a0faf06

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

aspnetcore/security/authentication/configure-jwt-bearer-authentication.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,10 +24,6 @@ This article covers the following areas:
2424
* Implementing JWT bearer token authentication
2525
* Recommended approaches to create a JWT
2626

27-
## Authentication v Authorization
28-
29-
Bearer tokens are often treated as an authentication mechanism, but in practice, the tokens are used primarily for authorization. Authentication occurs when a user first requests an access token in the UI layer. When the token is presented to an API, the process is more accurately described as *delegated authorization*. Because the token itself doesn't reveal who or what obtained it or how it was issued, the API can only confirm whether the token is valid for calling the requested resource.
30-
3127
## Token types
3228

3329
There are numerous types of tokens and formats. Generating your own access tokens or ID tokens is discouraged, except for testing purposes. Self-created tokens that do not adhere to established standards:

0 commit comments

Comments
 (0)