I have 2 web apps running in the cloud. the frontend one serves an angular app and the backend one exposes REST services.
Frontend is secured via SSO, but backend needs be secured as well. Backend needs to know what is the authenticated user to provide only data authorized for that user.
My initial thought is to implement a simple token generator in the backend, given some credential from the frontend (in the SSO process maybe) so all requests can go with the token.
But I was looking for suggestions too. For this situation, what products, tools and libraries and solutions are out there? I am specially interested in open source ones and those suited for node.js / angular stack.