java - Same Form based authentication for two applications Using Spring Security -
we have existing legacy web application(servlet+jsp+spring+hibernate) , going develop new features of application using new stack (angularjs+spring mvc). suggested approach register new servlet , develop new features in same codebase, authenticated users have access new functionality develop in system. there better way of doing 2 different web applications (without sso) ? can 2 web applications secured under same form based authentication settings ? i think architecture , security usability important before dive something. if both apps use same login, assume newer application more service oriented application. ex: restful authorization may issue. ex: legacy app used user set a, new 1 used both user set , b. otherwise can use shared database example mongodb store login info i.e token. when log in, return token , use other service via angular client. when log out remove token user session. may need concern token expiration. however have refactor legacy system in som...