api - How shiro authenticate request from non-browser client -
i have web site secured shiro. web site built heavy ajax stuff , rest api.
as understand, shiro (app server, tomcat) recognize user (client) through cookie (tomcat jsessionid).
now i'm starting build android app. how shiro (or tomcat) recognize client user, since there no browser handle cookie automatically?
should programmatically handle cookie httpclient? or there better practice shiro in scenario of app + restful api?
Comments
Post a Comment