JWT authentication with WP – Approach

This showed up as a notification due to the upvote. Here’s how I solved it.

1. The endpoint coded in the app that I am supposed to authenticate with prepares the token.
2. The token has to be in the specified format.
3. It then should be base 64 encoded and hash encrypted.
4. The wp_init handler should be used to handle the POST request sent by the endpoint, to extract the token.
5. The key will be shared via some other way, used for decryption.
6. Once the token is extracted, compare it against a locally generated token with the same information.
7. Store it in a cookie, and check it on every page access. You can expire it after a while or keep on increasing the time slice on every page access.

The endpoint could be in any language. Also this is the general flow of it, you can use it anywhere you want.