Jwenky: An Express API Server with User Authentication

Written by balden | Published 2020/08/22
Tech Story Tags: nodejs | express | jwt | mysql | react | authentication | api | cyber-security | web-monetization

TLDR Jwenky is an API server coded in Express framework. The server can be one standalone server, functioning as both an Authentication and an Access server. The Jwt is signed by the Auth server with the private RSA key. The client submits both the Jwt, and the cookie, with each request it sends to the Access servers. The system uses a refresh token, in a cookie, to refresh the JWT, which is valid for 20 hours. The whole system does not need any additional XSRf protection; it is Xsrf proof by design. Both the server and the client are available in the Github repo.via the TL;DR App

no story

Written by balden | Freelance developer
Published by HackerNoon on 2020/08/22