After playing with sessions, I got it working but I'm not thoroughly convinced it's the right way to go. It would be nice to experiment with JWT and see how that plays out in terms of code complexity, and what it would mean to wire up in React.
A lot of what I did in #4 in terms of database, etc... can be stolen, as bcrypt is a perfectly fine mechanism, etc... as well as the database methods themselves. The register endpoint can likely be stolen too.
You should likely exit this ticket with:
- login endpoint that will get the token if creds are valid
- logout endpoint that clears the token
I have never personally done JWT so this will also require a bit of learning on anyones part, feel free to have fun and play.
After playing with sessions, I got it working but I'm not thoroughly convinced it's the right way to go. It would be nice to experiment with JWT and see how that plays out in terms of code complexity, and what it would mean to wire up in React.
A lot of what I did in #4 in terms of database, etc... can be stolen, as bcrypt is a perfectly fine mechanism, etc... as well as the database methods themselves. The register endpoint can likely be stolen too.
You should likely exit this ticket with:
I have never personally done JWT so this will also require a bit of learning on anyones part, feel free to have fun and play.