title: How do I architecturally Kerberize an AngularJS application with a JBoss API
body: <p>I have a nifty AngularJS application that uses a JBoss (WildFly 8) RESTful API to retrieve data. To integrate it into my corporate environment, it requires Kerberos authentication. I've see miles of documents and examples, and even some customized advice from an internal Java developer. My problem, at this time, is where in the architecture can/should the Kerberization take place? </p>
  
  <p>Is it upon entry to the AngularJS app? As in do not allow unless the ticket is authorized?</p>
  
  <p>Or do I challenge each API call? If this is the case, then how would I pass along the client Kerberos ticket information to the API call?</p>
  
  <p>If my question sounds disjointed, or naive, it is. This is my first interaction with Kerberos.</p>
  
  <p>Help appreciated, thanks.</p>