Authentication and tokens

The server needs to check the identity of the client for every request between client and server

To do so, an authorization process based on a similar principle to the OAuth specification has been implemented: a JSON Web Token is used to authenticate all the client requests to the server.

The behavior is the following one:

1. An authentication service issues a JWT token upon verification of credentials.
2. The token is then sent as part of the HTTPS headers and used to access resources - according to the permissions associated with the user.