Currently, I am tackling a project that involves authenticating users in an application using their Windows credentials. The frontend is built with AngularJS and the backend with Java.
After conducting extensive research, I came to the realization that it is not feasible for the frontend to directly retrieve the user's Windows username & password due to security reasons.
However, I believe the initial step should be taken from the frontend by obtaining these encrypted credentials or possibly a token, then forwarding them to the backend to initiate the NTLM authentication process.
I am uncertain whether the user should manually log into the app with their Windows credentials or if it should be automatically authenticated through NTLM passthrough.
I lack a solid understanding of this concept as most resources I found predominantly focus on backend solutions (mostly C#), leaving minimal information on frontend approaches. Therefore, I seek some guidance on this matter. Is there a middleware or npm package that can assist me in acquiring the username & password, or do you have any recommendations?