We gained an understanding of how security tokens are exchanged between web-based Angular applications and backend APIs. JWT is a standard for representing claims securely between two parties. The simplicity of JWT makes it a compelling choice as the preferred token format for use in any token-based authentication solution. There's already a proposal for including it as part of the MicroProfile standard.
Angular comes with built-in security for various kinds of attacks, but still the developers need to pay attention to not break these. We saw how security can be implemented on the server side using JWT filters for securing RESTful APIs that are at the boundary of a microservice. We also saw how the client can obtain a token and then pass it in subsequent requests, using the HttpClient for Angular. Access control to certain views can be defined using the CanActivate...
