>
> allows_jwt means JWT is *allowed*, not that it is *required*. When you 
>> open the URL in the browser, you will have access as long as you are logged 
>> in in the browser -- JWT is irrelevant in that context.
>>
>
> Just to clarify, you *can* use JWT for authentication even from the 
> browser, but given your current setup, the standard cookie-based 
> authentication is still functioning.
>

something like this, isn't it?
*# Token Generator*
open 
http://127.0.0.1:8000/test/api/login_and_take_token?username=user\&password=password
*# Auth with Token Only*
open 
http://127.0.0.1:8000/test/api/header_jwt/table/1?_token=paste_jwt_token_here

best regards,
stifan 

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to