Question

I’m developing a html5+jquery+phonegap application. Server side is written in java and Spring MVC.And I hope to implement an authentication model as follows.

1. client signs up using his email which would be used as his userID.
2. A token is sent to his email.
3. He is given a screen to enter the token.
4. That token is stored in the local storage of the client.
5. everytime the client calls a webservice, his userID and token is sent by the app over https.
6. Server authenticates him and responds.

What are the options available to implment this kind of security from the server side? can Spring-security be used in this way? I tried to find any implmentation with Spring-security, but couldn’t find any implmentation other than basic authentication.

Answer 1

You can use PreAuthenticationProcessingFilter to achieve this requirement, have a look similar case and spring security doc