Now that we have introduced the JSON Web Token in Part 1 and dissected it in Part 2, we are ready to fire up Delphi and start writing some code to generate, verify, and validate some JWT tokens.

Cryptographic key considerations

HMACSHA256(  
  base64UrlEncode(header) + "." +
  base64UrlEncode(payload),
  "secret"
)

Nearly all JWT's examples (even mines) use the word 'secret' as the secret

In the first part I showed how to run a normal console application in the background, now is the time to build a real Linux daemon with Delphi!

First of all I want to thank my friend and colleague Luca Minuti that first built the daemon .dpr skeleton and showed it at the Delphi Day Italian conference in June.

What

This will be a multipart article, in this first part I explore the options of launching a (console) Linux program in background, in the next part I will focus on building a proper Linux Daemon with Delphi. So let's start!

Introduction

In the past weeks I've been busy converting some REST services, built with the WiRL REST library, to Linux.

In the first part of this article, I introduced the concept of authentication, the benefits using token-based authentication (opposed to session-based authentication), the use of JWT in a REST service, and we had a first look at the JWT, now it's the time to dig deep in the understanding of the JSON Web Token.

The JWT in depth

Let’s

JWT Authentication serie recap:

• JWT authentication with Delphi. Part 1 (this article)
• JWT authentication with Delphi. Part 2
• JWT authentication with Delphi. Part 3 (to be published)

This is the first article I will write about JWT and authentication technologies using Delphi, specifically I'll cover the topic of authentication (mostly in a HTTP world) using tokens (specifically JSON Web Tokens)