How to keep the user logged in to the application?

Question

Java

I want to make a messenger in JAVA (I'm still planning how it should work). The question arose of how to keep the user authorized, that is, do you need something like a cookie at all (The server will be built on multiplexing) or just save the socket with the user's login in the HashMap (I did this when writing a chat).

Answer 1

Signed cookies, cookie key (the data itself is in the database), key in headers, jwt in aphid cookies headers. Choose what you want.

Answer 2

And for example, when I recently wrote an application, I used the capabilities of Spring Boot.
Spring Boot + Spring Security + JavaFX. Spring is responsible for authorization and storage of user data...