java - Password Access with Multiple Instances -


i designing application require users first login , access several secure web pages. plan on using aws along aws load balancer , expect several aws instances of application running. "best practice" persisting security credentials across several web pages , several instances? user login , navigate through several secure web pages. presume aws load balancer round-robin redirecting each https request different server instance. how each instance know user has logged in? also, how keep secure pages secure external access? platform linux, java, , spring-boot.

i presume aws load balancer round-robin redirecting each https request different server instance.

that's default elb behavior, can enable sticky sessions on elastic load balancer lock user specific back-end server, @ point http session stored on 1 server keeps track of user's authentication state.

how each instance know user has logged in?

they don't, unless configure shared session store of kind. prefer using redis (elasticache) shared session store. of course if enable sticky sessions @ elb might prevent need shared session store.

also, how keep secure pages secure external access? platform linux, java, , spring-boot.

that's not feature of aws. need add security application. spring security.


Comments

Popular posts from this blog

ios - Memory not freeing up after popping viewcontroller using ARC -

Django REST Framework perform_create: You cannot call `.save()` after accessing `serializer.data` -

Why does Go error when trying to marshal this JSON? -