Node.js Authentication Basics

Websites need to know exactly who is requesting data to keep accounts secure. Node.js typically uses JSON Web Tokens (JWT) to lock down routes. When a user logs in, they get a secure token that they must show every time they request private data.

1/* this creates a secure token */
2const jwt = require('jsonwebtoken');
3const token = jwt.sign({ userId: 123 }, 'secret_key', { expiresIn: '1h' });