How to Implement authentication in custom api (as plugin)?

[rahul7827]

Hello Team

I have written some custom apis for my application. Now i am implementing login/register feature in java. (I am not good in java)

Some of application which i have developed earlier in laravel (PHP framework) having the following flow  :

User signIn into the SPA application, On successful login we create a token and expiry time, and save them in DB and return them in response. On the front end we keep the token into localStorage.

On every api request we append the token as payload and the application middleware authenticates the token with DB.
If token is valid with expiry time, then user is genuine user else logout the user and redirect to login.

Should I use the same approach in java too? Or there is some other mechanism. Please suggest.

[Burak]

Hi my dear friend @rahul7827,

How is it going? Could you create the authentication structure? 

[rahul7827]

Hello dear friend @Burak

Sorry for the delay reply. 

I am able to understand some logic, but need to understand how web.xml and servlet works.

Due to the busy schedule unable to give sufficient time on this. This weekend will try to explore more. 

 

[Connessione]

You can look into creating a rest api service through plugin (using sampleplugin as example). Everything else will be same as php app. Since you are not dealing with sessions you don't need to worry much.