title: Session Management in Angular+Web API application
body: <p><strong>Here's what I am trying to do</strong></p>
  
  <ol>
  <li><p>I am creating a SPA in Angular.</p></li>
  <li><p>All my Business Logic is written in Web API.</p></li>
  <li><p>I am making http calls from Angular to REST APIs and getting Json data and binding it to Angular UI.</p></li>
  </ol>
  
  <p>This is all working fine. Further <strong>I want to implement session maintenance in my application.</strong></p>
  
  <p>Once a user log in, I am calling another api to check if credentials are correct and API returns true or false, based on which Uesr is redirected to home page.</p>
  
  <p>Now here I need to maintain user's session unless user log out. Now here's the way I know to do it.</p>
  
  <p>Cookie-> I could create a cookie to maintain session but it would be risky and it could help with session hijacking.</p>
  
  <p><strong>Note</strong>: I am not talking about token authentication, that has completely different purpose I believe.</p>
  
  <p>If you can suggest something related to may be using node.js or something in Angular which I am not aware of, that would be a great help.</p>
  
  <p>If you want to suggest on the architecture I am following. that is also welcome.</p>