Open j-rewerts opened 7 years ago
The way I will handle authenticating resources is by using the session ID that is already being passed around. A piece of middleware will ensure that the requested resource is allowed to be accessed by the requester.
If the app uses SSL, it should be okay to pass authenticated tokens around.