...

Endpoint Protection

The method by which secure endpoints are protected.

A planned method of authenticating HTTP requests from the Safe Places web app is to use a JSON Web Token (JWT).

...

During token validation, we hash the context in the token and compare it with the sent cookie. If they are different, then reject the request.

Access Code Exchange

The method by which access tokens for consent are generated and exchanged.