Guides to handling user auth in React/Node with sessions instead of JWT??
It seems like every guide I can find that covers authentication in Node/React uses JWT's, which isn't the best way to implement authentication. Could anyone link any trustworthy tutorials/guides covering authentication using server sessions?
I'm in the middle of writing a blog post about cookies, JWT, and sessions. Maybe you could help me decide what to concentrate on.
I think the differences between authentication, cookies, and JWTs can lead to confusion when they are combined in examples.
For me, it was helpful to understand what each thing is and isn't. I learned first how cookies are used to setting and getting back state a user holds, second how various types of signatures are used to verify that is valid info I issued to the user, and third why JWT is a convenient way to structure data that has that information. Link dump follows.
Hey @MicroVert. I don't have any great guides or tutorials to link to, but I did want to say that I use cookies for keeping users "logged in".
I picked up pieces of the puzzle here and there. Started out with Brad Traversy's youtube channel.
My stack is node/express for backend api, mongodb; and svelte for frontend.
I do like JWTs, but opted against them - so far.