客户端/服务器应用程序中的身份验证和安全模型

I'm developing custom client/server application that requires client to log in with their username and password. The user accounts are not related to Windows/AD accounts in any way. After login, client application will request other services from server system. I'm developing custom client/server application