Geek asks and answers

Web Service User Authentication and Session Management Best Practices

According to the headline, I wonder what recommendations are for web service user authentication and session management, mainly for backend implementation , especially using Java (J2EE).

Has anyone posted anything on this subject? What security considerations should be considered when working with user authentication? What design patterns are related? How should sessions be managed? What does a well-designed architecture look like?

Are there existing systems that can be used as good examples or even bad examples?

+3
source share
2 answers

Since the Java EE specifications for web services are essentially showing that you are showing a non-bean session as a web service, you cannot implement session management without a “home” solution, such as including a user token in each of your requests.

+3
source

Not specifically REST, but we use the same authentication mechanism for standard web services as for any other web container request. The tools send basic authentication data to the backend. For SSL. Never had a problem.

0
source

More articles:


All Articles