Spring REST security without jsp

I have a Rest project created by STS "New spring starter project" and I want to add authentication and authorization, I searched about that but every time I faced a jap files to login and logout. My approach is to build a pure html project (separated project) as a client so it will be easy if I want to change the client to another form later. I think about using oAuth2 but I found that it is not recommended to use it for authentication.

Am I thinking in the right way, can I build a pure html project as client?