Developing SPA application can be extremely exciting, but we should always stay focused on securing all the app’s possible leaks.
Managing user authentication via RIA (Rich Interface Applications) is similar to standard web Client Server Application. Usually, in Standard web apps the authentications is fully managed by the used framework (Laravel Auth, Spring Security …) and it’s pretty simple.
RIA apps uses XHR requests to retrieve data from the server via REST services, it can’t manage authentication exceptions, because the tokens verification are made server side.
In our case we will be developing a REST API that should use the Framework Authentication features and manage Authentication issues (disconnects, session expiry, hacks, etc …) and redirect the user to the login form.
Your new post is loading...