Node JWT Authentication
Authenticate with JWT token
Documentation
Why use JWT web tokens
These tokens are used to protect routes in an API, so that we can add authentication to fetch a token and then we can make access to that token to get access to protected routes. If we have node on backend and react on front end we can make request to login and get the login stuff, thus we can get a token which can be saved anywhere and by that token we can get the protected stuffs that we need.
Things available here
- A mock user.
- An overview of how to protect routes.
- How to get a token and how to use it to access routes.
JWT Notes
- To implement the jwt web token we first need to get the token.
- We can get the token asychronously or synchronously.
- Read the documentation.
- JWT cycle goes like auth>varifies>jwt token
- Here we are using a mock user to give the payload parameter
- code goes here
jwt.sign({ user }, "secretkey", (err, token) => {
res.json({
token
});
});-
To protect the routes that are needed to be protected, we need to create a middleware.
-
The middleware goes to the post method.
-
Bearer <access_token>
-
On entering the protected route we need to verify the token
To Get Access to Protected routes
Whenever we login through the api the api will generate a random jason web token then we need to pass the token through the header, like we need to pass the token whenever we want to create a POST method. We can use postman and under header key as Authorization and value Bearer <access_token> and then pass the value the post will be created.
Make sure to check the Authorization mark checked otherwise the body wont be able to create any posts. Any type of missmatch to the token the request will give use Forbidden signal.
We can also create an expication time for the web token. Check the documentation for many other options.