如何使用节点和快递存储身份验证令牌

Question

I have two nodejs app for client and server. Client side doesn't rely on any libraries for building interfaces. It uses pure html and express routes to the requested page.

router.get('/', function (req, res) {
    res.sendFile(path.join(__dirname + '/index.html'));
});

Client sends an auth request to the server via AJAX call and receive the auth token back. I need to store it somewhere and make sure express checks if token is available or not to reroute user to login page if unauthenticated (token is not available)

I was thinking to use localStorage but it is not available/accessible under express.

$.ajax({
  url: 'http://server:8080/login',
  type: "POST",
  data: {username, password},
  dataType: "JSON",
  contentType: 'application/json',
  success: function (data) {
    localStorage.setItem("jwtToken", data.jwtToken);
  },
});

Answer 1

Maybe your should consider store it like a cookie and all the new requests to your server will contain the necessary information to verify the auth of the client.

Answer 2

So that developers don't have to deal with tokens and other aspects of an authentication system, I created an npm package. You can check if the user is logged in or not with this package as well. Here is the link:

https://www.npmjs.com/package/authenticatejs