What I've typically seen being done is a token that's sent via a custom HTTP Header. Those are first obtained via a login / auth function. You could also require a username with that auth token. If you're using CDI you could create a security interceptor to check those and deny / allow that way.
Settings
Jason Porter
What I've typically seen being done is a token that's sent via a custom HTTP Header. Those are first obtained via a login / auth function. You could also require a username with that auth token. If you're using CDI you could create a security interceptor to check those and deny / allow that way.
4:10 p.m., Friday May 31
Moderate this comment by email
Email address: lightguard.jp@gmail.com | IP address: 63.248.81.177
Reply to this email with “Delete”, “Approve”, or “Spam”, or moderate from the Disqus moderation panel.