AuthenticationResearch

Authentication

Passport.js

Passport is authentication middleware for Node.js. As it’s extremely flexible and modular, Passport can be unobtrusively dropped into any Express-based web application.

JWT (JSON Web Tokens)

• JSON Web Tokens are an open, industry standard methods for representing claims securely between two parties
• JWT's are strings of data that can be used to authenticate and exchange information between a server and a client

Steps for using JWT

1. Client sends credentials to the server
2. Server verifies the credentials, generates a JWT and sends it back as a response
3. Subsequent requests from the client have a JWT in the request headers
4. Server validates the token and if valid, provide the requested response

Database

-We need a database

Websites

Node

• https://medium.com/quick-code/handling-authentication-and-authorization-with-node-7f9548fedde8 Passport and JSON Web Token
• http://www.passportjs.org/packages/passport-jwt/ Bycrypt - for hashing and salting passwords and sensitive information
• https://www.npmjs.com/package/bcrypt