I have 2 web apps running in the cloud. the frontend one serves an angular app and the backend one exposes REST services.

Frontend is secured via SSO, but backend needs be secured as well. Backend needs to know what is the authenticated user to provide only data authorized for that user.

My initial thought is to implement a simple token generator in the backend, given some credential from the frontend (in the SSO process maybe) so all requests can go with the token.

But I was looking for suggestions too. For this situation, what products, tools and libraries and solutions are out there? I am specially interested in open source ones and those suited for node.js / angular stack.

  • This is not a question about Software Recommendation so it would be Off-topic on this site. You might have luck on the sister site stackoverflow.com – Yisroel Tech Jun 11 '19 at 23:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.