Introduction
Authentication is a process to identify user's identity and grant them access to the resources provided by application. In backend development,
authentication plays a major role to grant or restrict users to access specific resources.
Authentication can be done in two ways: -
Token-Based Authentication.
Session-Based Authentication.
Here we'll talk about Token Based Authentication.
Token-Based Authentication
Token-based authentication is a widely used security mechanism to offer robust experience to users without compromising with the security.
In the token-based authentication, when user logged in server generates unique token for users. After server generates the token, it will be sent to client and stored on client's system locally. Whenever client makes a request, this token go with each request to verify the identity of user.
Authentication Process
REQUEST- When user login to the application, browser made a request to server with user credentials.
VERIFICATION - When request comes to the server it validates the user and generates a secret key known as token and send it to user via HTTP.
Generally, the token is sent in a JWT [jsonWebTokens] open standard that consist of a header, payload, signature.VALIDATE TOKEN - When user receives the token secret code it saves on client's browser as it helps to verify identity whenever user makes a request. this token is short lived have a life span of 15-60min and this token is also known as access token code. If user unable to use access token code, then it will request for refresh token code which stays in system for 3-4 days.
RESPONSE - When the validation is done then token grants or restrict user to access specific content.
Example
Let's take an example, we'll implement token-based authentication using register and login methodology.
First, we will create functionality for Register module for a user:-
STEP1: - Register User
Register uses collects data from user to create account
// FIRSTLY, WE'LL SELECT THE REGISTER FORM
const form = document.querySelector(".register");
// ADDING EVENT LISTENER TO FORM TO COLLECT THE VALUES FROM USER
form.addEventListener("submit", (e) => {
e.preventDefault();
const username = e.target.username.value;
const email = e.target.email.value;
const password = e.target.password.value;
});
STEP2: - Encrypting the password
Before saving user's data to database, we first need to encrypt the password for security purpose then save it to database.
For encrypting the password, we use npm package bcrypt.
Firstly, we need to install the package by writing in terminal: -
npm install bcrypt
Now, we'll hash the password like this
// FIRSTLY, WE'LL SELECT THE REGISTER FORM
const form = document.querySelector(".register");
// ADDING EVENT LISTENER TO FORM TO COLLECT THE VALUES FROM USER
form.addEventListener("submit", (e) => {
e.preventDefault();
const username = e.target.username.value;
const email = e.target.email.value;
const password = e.target.password.value;
});
bcrypt.hash is a function which hashes the password with salt rounds. It generates different hashed key every time weather any of two users have same password.
Login functionality
When any user try to login, it retrieves hashed password from database and compare it with password given by user during login
// IMPORTING BCRYPT MODULE
const bcrypt=require('bcrypt');
// ASSIGNING USERS PASSWORD
const plainPassword=userPassword
// ENCRYPTING PASSWORD
// BASIC SYNTAX
// bcrypt.hash(plainTextPassword,salt_rounds)
const hashedPassword=bcrypt.hash(plainPassword,10);
if(!hashedPassword){
throw new Error('Enable to generate password')
}
// NOW WE WILL SAVE USER DETAILS AND PASSWORD TO DATABASE
console.log('Hashed Password is : ',hashedPassword)
The above is the detailed content of Authentication System Using NodeJS. For more information, please follow other related articles on the PHP Chinese website!
Hot AI Tools
Undress AI Tool
Undress images for free
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
How to make an HTTP request in Node.js?
Jul 13, 2025 am 02:18 AM
There are three common ways to initiate HTTP requests in Node.js: use built-in modules, axios, and node-fetch. 1. Use the built-in http/https module without dependencies, which is suitable for basic scenarios, but requires manual processing of data stitching and error monitoring, such as using https.get() to obtain data or send POST requests through .write(); 2.axios is a third-party library based on Promise. It has concise syntax and powerful functions, supports async/await, automatic JSON conversion, interceptor, etc. It is recommended to simplify asynchronous request operations; 3.node-fetch provides a style similar to browser fetch, based on Promise and simple syntax
JavaScript Data Types: Primitive vs Reference
Jul 13, 2025 am 02:43 AM
JavaScript data types are divided into primitive types and reference types. Primitive types include string, number, boolean, null, undefined, and symbol. The values are immutable and copies are copied when assigning values, so they do not affect each other; reference types such as objects, arrays and functions store memory addresses, and variables pointing to the same object will affect each other. Typeof and instanceof can be used to determine types, but pay attention to the historical issues of typeofnull. Understanding these two types of differences can help write more stable and reliable code.
React vs Angular vs Vue: which js framework is best?
Jul 05, 2025 am 02:24 AM
Which JavaScript framework is the best choice? The answer is to choose the most suitable one according to your needs. 1.React is flexible and free, suitable for medium and large projects that require high customization and team architecture capabilities; 2. Angular provides complete solutions, suitable for enterprise-level applications and long-term maintenance; 3. Vue is easy to use, suitable for small and medium-sized projects or rapid development. In addition, whether there is an existing technology stack, team size, project life cycle and whether SSR is needed are also important factors in choosing a framework. In short, there is no absolutely the best framework, the best choice is the one that suits your needs.
JavaScript time object, someone builds an eactexe, faster website on Google Chrome, etc.
Jul 08, 2025 pm 02:27 PM
Hello, JavaScript developers! Welcome to this week's JavaScript news! This week we will focus on: Oracle's trademark dispute with Deno, new JavaScript time objects are supported by browsers, Google Chrome updates, and some powerful developer tools. Let's get started! Oracle's trademark dispute with Deno Oracle's attempt to register a "JavaScript" trademark has caused controversy. Ryan Dahl, the creator of Node.js and Deno, has filed a petition to cancel the trademark, and he believes that JavaScript is an open standard and should not be used by Oracle
What is the cache API and how is it used with Service Workers?
Jul 08, 2025 am 02:43 AM
CacheAPI is a tool provided by the browser to cache network requests, which is often used in conjunction with ServiceWorker to improve website performance and offline experience. 1. It allows developers to manually store resources such as scripts, style sheets, pictures, etc.; 2. It can match cache responses according to requests; 3. It supports deleting specific caches or clearing the entire cache; 4. It can implement cache priority or network priority strategies through ServiceWorker listening to fetch events; 5. It is often used for offline support, speed up repeated access speed, preloading key resources and background update content; 6. When using it, you need to pay attention to cache version control, storage restrictions and the difference from HTTP caching mechanism.
Handling Promises: Chaining, Error Handling, and Promise Combinators in JavaScript
Jul 08, 2025 am 02:40 AM
Promise is the core mechanism for handling asynchronous operations in JavaScript. Understanding chain calls, error handling and combiners is the key to mastering their applications. 1. The chain call returns a new Promise through .then() to realize asynchronous process concatenation. Each .then() receives the previous result and can return a value or a Promise; 2. Error handling should use .catch() to catch exceptions to avoid silent failures, and can return the default value in catch to continue the process; 3. Combinators such as Promise.all() (successfully successful only after all success), Promise.race() (the first completion is returned) and Promise.allSettled() (waiting for all completions)
Leveraging Array.prototype Methods for Data Manipulation in JavaScript
Jul 06, 2025 am 02:36 AM
JavaScript array built-in methods such as .map(), .filter() and .reduce() can simplify data processing; 1) .map() is used to convert elements one to one to generate new arrays; 2) .filter() is used to filter elements by condition; 3) .reduce() is used to aggregate data as a single value; misuse should be avoided when used, resulting in side effects or performance problems.
JS roundup: a deep dive into the JavaScript event loop
Jul 08, 2025 am 02:24 AM
JavaScript's event loop manages asynchronous operations by coordinating call stacks, WebAPIs, and task queues. 1. The call stack executes synchronous code, and when encountering asynchronous tasks, it is handed over to WebAPI for processing; 2. After the WebAPI completes the task in the background, it puts the callback into the corresponding queue (macro task or micro task); 3. The event loop checks whether the call stack is empty. If it is empty, the callback is taken out from the queue and pushed into the call stack for execution; 4. Micro tasks (such as Promise.then) take precedence over macro tasks (such as setTimeout); 5. Understanding the event loop helps to avoid blocking the main thread and optimize the code execution order.
