Bcrypt

• It is designed to be intentionally slow to take hackers longer to break a password.
• It executes an internal encryption/hash function many times in a loop.
• Bcrypt is configurable, with a log_rounds parameter that tells it how many times to execute that internal hash function

Basic Access Authentication

• Is a method for an HTTP user agent (e.g. a web browser) to provide a user name and password when making a request.

• Enforces access control without requiring cookies JSON WebToken

• JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object.

• Securely transmitting information between parties

Authorization

Information Exchanges

• Token Structure:
• In its compact form, JSON Web Tokens consist of three parts separated by dots (.), which are:

1 Header 2 Payload 3 Signature