I need to write a website with authentication, but don't now what is the best way.
My current idea is, that the browser sends the username and password to the server, which checks it. If valid, it sends back a "login token", afterwards the browser only submits this login token to access the server.
Is this a proper way of doing it and is this secure?
Aucun commentaire:
Enregistrer un commentaire