Re: How to make my app more secure. URL token

Well, thanks everybody.

I will implement this asap. I thought there might be another way, then to validateing the hash or the username.

luni, 6 iunie 2016, 14:47:47 UTC+3, Olar Andrei a scris:

Hello,

For now my aplication (MVP) has a login page, and 2 other palces, the AdminPlace and the UserPlace.

My URL looks like this:

http://127.0.0.1:8888/AdministrareBloc.html#AdminPlace:Admin

The login form consists of username and password, where the username is passed as a token to the next Place.

A user can't connect if he does not know the password, but let's say I'm logged in like in the link above. If I change the Admin to Admin2 or whatever, I still can see the page content. I don't want this. How can I avoid this ?

Thanks in advance

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To post to this group, send email to google-web-toolkit@googlegroups.com.
Visit this group at https://groups.google.com/group/google-web-toolkit.
For more options, visit https://groups.google.com/d/optout.