Hi,

Im developing a POH5 app using the Aerogear recommendations, ajax invoking rest endpoints for loading dynamic data. Im at the part where i should handle user credentials and session, Im sending credentials to a rest endpoint that do the credentials validation and create a session object added to a cookie or local storage.

But Im looking for some way to handle the session validation on the server side, for each invocation I would need to validate the session, does CDI or the JAX-RS provide any mechanism for this use case? or do you know any framework/best practices that help to do it?

thanks

Alejandro