rest - AngularJS authentication questions -
we planning implement angularjs web application communicating business components via rest service layer. web app needs offer authentication mechanism. example particularly concerned user authentication process since angular code practically available users on clients.
and how can reassure users authenticated after initial authentication process (in jsp/php use sessions)?
could please give pros. , cons?
your right client side code available, viewable, , editable thru standard browser developer tools. if company type of security audits on software you'll find security reasons processing done on server side outside of view of client code. companies have worked have taken approach trust nothing sent client side server.
on server side rest layer typically contains authentication layer bubble client when.
-invalid session -incorrect permissions make rest call -invalid rest args -prevents script jacking text fields -etc...
Comments
Post a Comment