From the course: Node.js: Microservices

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

API authentication with JWT

API authentication with JWT - Node.js Tutorial

From the course: Node.js: Microservices

Start my 1-month free trial Buy for my team

API authentication with JWT

“

- [Instructor] In this chapter, we will look at how we can make API endpoints more secure by adding authentication. This is an incredibly important and often forgotten topic. Let's see how we handle our user authentication today. For some operations, we require a locked in user like for creating or editing items. Here we see the login route in our shopper app but now we haven't moved authentication into a separate service, but this isn't important at this point. In line 10, we see that when a user logs in the form we try to authenticate the user, and if this succeeds, we store the user at the in the session. From then on, we trust the user, but we also revalidate it on every request that happens up here in lib middlewares. There we have this code block starting in line 13 that will first check if there is a user ID on the session, and then try to load it from the database. So if a user is deleted or their…

Contents