App2.java

@Path("app2")
public class App2 {

    @Inject
    private Auth auth;

    @GET
    public Response helloWorld(String token) {

        if (!auth.isLogged(token)) {
            throw new WebApplicationException(Response.Status.UNAUTHORIZED);
        }

        return Response.ok("Hello World. Welcome to App2!").build();

    }

    @POST
    @Consumes("application/x-www-form-urlencoded")
    public Response helloWorld(@FormParam("login") String login, @FormParam("password") String password) {

        if (Objects.isNull(login) || Objects.isNull(password)) {
            throw new WebApplicationException(Response.Status.INTERNAL_SERVER_ERROR);
        }

        String token = auth.login(login, password);

        return Response
                .ok("Hello World. Welcome to App2!")
                .header("token", token)
                .build();
    }

}