Let's consider the identity app once again. We implemented IdentityStore and AuthMechanism to authenticate the user, and then provided access to the user to invoke the /organization endpoint.
We will modify this project to demonstrate the JWT. We will also add a new /login resource, which takes the user ID and password in the header, and validates it against IdentityStore, as explained earlier. Let's write this sequence to understand what we intend to do:
As shown in the preceding sequence diagram, /login is the entry point that takes the user's credentials, which we then validate using the IdentityStore, before generating ...
