Protect HTTP Requests with Android

Question

I have an Android application, which requests Servlet or JSP files that return JSON.

For example, in my application the user logs in and can add requests, when adding requests, the same is added via Servlet in JSON format, so he requests an http URL.

I usually pass a key together via POST and in the Servlet file I check if the key is right and allow the request.

I ask: is there a more effective and safe way?

Answer 1

There is a better way. Implements JWT https://jwt.io/ on your server. so you send the TOKEN whenever you make a request.