java - Best way to ensure a principal information is not edited with javascript -
i have react app , api send links user has access to.
from them, creates menu.
i might still need role of principal client side choose display or not information.
i thinking create checksum of principal object in java , send principal object serialized react client.
i need able evaluate checksum client using javascript user cannot use modified principal information (and modified role).
what appropriate way so?
Comments
Post a Comment