java - Same Form based authentication for two applications Using Spring Security -


we have existing legacy web application(servlet+jsp+spring+hibernate) , going develop new features of application using new stack (angularjs+spring mvc). suggested approach register new servlet , develop new features in same codebase, authenticated users have access new functionality develop in system. there better way of doing 2 different web applications (without sso) ? can 2 web applications secured under same form based authentication settings ?

i think architecture , security usability important before dive something.

if both apps use same login, assume newer application more service oriented application. ex: restful

authorization may issue. ex: legacy app used user set a, new 1 used both user set , b.

otherwise can use shared database example mongodb store login info i.e token. when log in, return token , use other service via angular client. when log out remove token user session. may need concern token expiration.

however have refactor legacy system in someway use token. if not possible, can use session sharing handled the container if the both apps running under same container. ex: tomcat. may hard integrate native mobile app if hoping so.

sharing session data between contexts in tomcat


Comments

Popular posts from this blog

wordpress - (T_ENDFOREACH) php error -

Export Excel workseet into txt file using vba - (text and numbers with formulas) -

Using django-mptt to get only the categories that have items -