JWTCBT (JSON Web Token Crypto Bcrypt Technique) Based Authentication Scheme for User Authentication

Abstract

A wide range of hardware and software that are directly connected to Internet connections are combined to form information and communication technology, or ICT. The development of customer server systems, including cloud-based, IOT-based, and smart home systems, is accelerating in the contemporary technological period. User authentication is a big concern for many apps, and server load has increased as a result of an increase in client-server queries. The phrase "information security" refers to the processes and tools specifically designed and put into place to protect sensitive user data from tampering, disruption, deletion, and additional examination. Combining several technologies, such JWT (JSON Web Token) for authorization and authentication, BcryptJS for hashing and Crypto for encrypting important data, and NodeMailer for OTP transmission, can result in an improved information security architecture. introducing a three-tiered security paradigm to reinforce user authentication, with the traditional username and password combination serving as the first tier's basic barrier. The second tier then employs Google CAPTCHA, which reduces automated threats. The last layer is a one-time password (OTP) which is sent to the user's registered email address or mobile number.