I have a web application like this:
An angular frontend for client and a spring MVC backend for admin panel.
- A angular web application requests a JWT token from tomcat/spring MVC.
- The angular application the uses the token as Bearer for HTTP requests.
But now a requirement has come up:
- The user will use that token to log in into the spring web application.
- The server will verify that token to create a session in the backend.
My question is, is the setup feasible, are there any security risks associated with using a JWT token to authenticate in spring mvc backend?