/auth-intro

Primary LanguageJavaScript

Node Auth Intro

  • Login
  • Logout
  • Session

JSON Web Tokens (jwt)

  • sign

const jwt = require('jsonwebtoken')
...

jwt.sign(<objeto a guardar en el payload>, 'llave-secretísima', <opciones>, <funcion-callback> (err, token) {

})

Password Hashing (bcrypt)

  • Install

$ npm i -s passport $ npm i -s passport-local $ npm i -s express-session

  • Objective: authenticate requests
  • Work as a middleware

Strageties

  • Distinct authentication mechanisms

  • In case of success authentication request will be decorated with req.user

  • LocalStrategy

Recives two params username y password, y la función done()

  • done (err) para manejar un error de servidor
  • done (null, false, {message: 'asdasd'}) error de authentication
  • done (null, credentials) para lo que queramos guardar (expose o decorate) req.user

OAuth (fb, twitter, google)