JSONWEBTOKEN

NODE

What can jsonwebtoken do

LOGIN

Composition

HEADER.PAYLOAD.VERIFY SIGNATURE

HEADER

ALGORITHM & TOKEN TYPE

PAYLOAD

DATA

VERIFY SIGNATURE

signature of two fields above

Advantage

No need for cookies

No need for sharing session

Securely

Easy to use

How to use

Client request

POST /login HTTP/1.1
...
name=ybudan&password=123456

Server verify and generate signature

const person = await DB.model('person').find({ where: { email, password } })
if (person) {
  ctx.body = await sign({ DATA }, 'SECRET KEY', {
    expiresIn: '7 days'
  })
}

Client receive response and save token in localStorage

Everytime reopen the website, take token from localStorage and decode it

const token = localStorage.getItem('token')
const authToken = decode(token)