NovaEdge Academy DocsDocs
DocsAuthentication & OAuth 2.0

Authentication & OAuth 2.0

Security

Understanding JWT session tokens, Google OAuth 2.0, and two-factor authentication (2FA).

JWT Cookie Sessions

NovaEdge Academy uses HTTP-Only, Secure JWT cookies for authenticating API requests across frontend and backend microservices.

javascript
// Verified response headers on login
Set-Cookie: token=eyJhbGciOiJIUzI1Ni...; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=2592000

Google OAuth 2.0 Integration

Google Sign-In utilizes Google Identity Services SDK (https://accounts.google.com/gsi/client). The backend verifies the credential ID token directly with Google's tokeninfo API.

javascript
// Backend verification endpoint
POST /api/v1/google-login
Payload: { "credential": "GOOGLE_ID_TOKEN_STRING" }
Was this page helpful?