Secure Token URL - How secure is it? Proxy authentication as alternative?

Question

I know it as secure-token URL, maby there is another name out there. But I think you all know it.

Its a teqniuque mostly applied if you want to restrict content delivery

Answer 1

You have many ways to secure a token :

• Block IP after X failed token decoding
• Add a timestamp in your token (hashed or crypted) to revoke the token after X days or X hours
• My favorite : use a fast database system such as Memcached or better : Redis to stokre your tokens
• Like Facebook : generate a token with timestamp, IP etc... and crypt it !