Home/ Questions/Q 878449
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-15T11:46:20+00:00

I’m writing a small GWT front-end for a backend app and I was wondering

  • 0

I’m writing a small GWT front-end for a backend app and I was wondering about the best security model for GWT apps?

I was thinking of implementing an RPC method that receives an MD5 of a user password from the client webpage, then passing back a session ID to the client page (or a failcode). All subsequent calls would simply use the session ID and the server would keep a track that the IP address for the session ID is the same IP address that created the session ID?

Is this the standard mechanism for (non-ssl) authentication for GWT applications?

If not, can anyone suggest alternative solutions?

Thanks,

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    This page by google gives a good overview of the security and tasks associated with logging in users. The link on that page to Security for GWT Applications also addresses several common gotchas specifically associated with GWT.

    • 0