I will advise you.

Hi,
as I already told in this 3d, I tried to support the token. I have checked it again now and I can (unfortunately) confirm that there is no "clean" way to do this. Joomla inits the session before to trigger any event, and the session initialization sets and uses the cookie.
Your example allows the authentication with a token, but the problem is not with the authentication itself, we can login the user in any way. The problem is with the user's session which is retrieved by Joomla using only the session cookie. So I should authenticate the user on each request and however the saved state is not available (no previous state, no history, no transactions).

Kind regards,
Luigi

Hi,
as promised here you can download the CRUD demo module:

www.selfget.com/downloads/file/42-plg-jbackend-tags-crud-j30.html

Now the rest is up to you...

Kind regards,
Luigi