I am building a card holder application in which UI is in Angular 4 and Backend is in Spring Rest Service. Now, there is a login screen, so once user logs in he can see another screens like transaction history, currency list, currency rates etc.
Now, my challenges are: (1) How to encrypt username and password to prevent it from hacking. (2) How to maintain a user session as I have UI in Angular and backend in Spring Rest (Java)
Please help
Based on definitions, REST api are stateless, so no session or storing values. You need to have something like jwt token,
1 - when user logins, in login request you send user and password to beckend
2 - backend authenticates the user and generates jwt token and send it to frontend
3 - you keep this token in memory (in angular service or ngrx store)
4 - on other request to server, add token in the header
5 - backend receives the token, deserialize it and it knows which user is calling the api
also your backend can check if the auth token is not present returns 401 then in your frontend if you receive 401 redirect to login page and rest is the same as above
