Name: JWT Authentication Tutorial - Node.js
Uploaded: 2020-03-28T17:24:36.000Z
Duration: 27 min 36 s
Description: Thousands of YouTube videos with English-Chinese subtitles! Now you can learn to understand native speakers, expand your vocabulary, and improve your pronunciation...

Adverbs of manner

it is finally here this video we're going to be talking about J W T authentication using know Js and express.

And we're gonna be recognises into two separate parts in the first part.

Adverbs of degree

We're just going to do a simple J W T authentication will recreate tokens, sent tokens to users and authenticate those tokens on our server.

And in the second part, we're gonna talk about how we can use a refresh token in orderto automatically refresh our JWT tokens to increase the security of our server, and also revoked privileges from users that we no longer want to access our server similar to how a log out function works.

So make sure you stick around to the end of the video.

So with that, out of the way, let's get started.

And my goal is to simplify the web for you so you can start building your dream project sooner.

Make sure subscribe to the channel for more videos just like this one.

And for this video, as always, I have visual studio code opened up completely blank folder so we can start this project.

And the very first thing we need to do is initialized this project with NPM.

Dash, why is going to initialize our project with all the default settings?

And now we can install the libraries that we're going to be using the library's we're gonna be using.

As I mentioned in the intro, we're gonna be using express Soviet type NPM.

We also gonna be using a library called Jason Webb Token All one word.

And then lastly, we're going to install dot e N V, and this is just going to allow us to use a dotty envy file, which is going to contain our secret tokens for J W T.

And this is where we're gonna put those secret tokens.

Lastly, we're gonna install a development dependency and PM I dash, dash save Dev, and this is called no demon.

And what node Mom lets us do is automatically refresh our server every time we makes changes to it.

So we don't have to manually close and restart our server ourselves And as soon as that finishes downloading, we're gonna create a script which is going to allow us to start our server using node money really easily.

And we're gonna do that on a file called server dot Jason, this is going to be our main server file.

So now, insider package Da Jason, you can see all of our dependencies air showing up in here, and we can just come down here and type in Dev's start.

And we want this command to be node Mon, and it's going to run our server dot Jason file.

So this is going to run our service, Jason using Nordmann.

And we can start that by just running NPM Run Dev start.

And of course, we're going to an air because I forgot to save my package Dodge a son.

And as you can see, it started up our server and since we have nothing in it, it just exited out.

For example, if we put a concert out log, put Hyeon here, save it, you can see that it's actually refreshing our server every time.

So to get started with our server, we want to first important express.

Will you just do that by requiring the express library And in order to set up an express server, we need to get the at variable, which is going to come from express so we could just call the express function and then say ap dot listen and tell what we want to listen.

For example, on Port 3000 now we have an application running on Port 3000.

But of course it doesn't do anything yet.

In order to get our application up and running, let's actually just create a simple route an app dot get route.

This is going to get all of the post inside of her application.

And this is of course, going to have a request and a response.

And inside of here we could just run a function.

And inside of this function, all we want to redo is return a list of post socialist creative variable, which is going to have all of our post inside of it just like this.

And this is going to be an array with objects.

We're gonna have a user name for the person that created the Post.

So, for example, me and we're gonna have a title for that.

And we can just say Post one and let's just put to post in here for now.

So if I just copy this down and we're gonna change this user name here to be Jim never go.

And, of course, the title should be post two and inside of our app Target.

So we can say resident Jason and we want to return our post.

Now, if we say that, create a new file called request dot rest.

And this is going to allow us to make arrest.

You can use something else like postman, but because I have the extension installed in visual studio code called the rest client down here.

It allows me to just use a dot rest file to make these calls.

We could just say we want to make a get request to http local host Port 3000 and we just want slash post.

So now if we send that request, you can see we get the list of our post back for us.

So we know that our application is working and running properly.

Now, the next thing for us to do is to actually authenticate our request using J W T.

So we don't let everyone access the post and only specific users, so we could just create a route to do that.

We can say ap dot Get this is going to be our log in route and, of course, is going to take a request and a response.

And the very first thing you do in this log in route is you want to authenticate the user.

And in our case, I've already done a video on user authentication using passwords and usernames.

So if you want to check that out, it's going to be in the cards and the description below.

So what is gonna ignore this portion of the authentication so we can focus purely on how J.

So the next thing we need to do is actually create that Jason Webb token.

And to do that, we want to require that library we used earlier.

Which is equal to require of Jason Webb Token.

Also, since we're going to be passing Jason to this app dot Get, we need to make sure our server can handle that so we can say ap dot use and we want to pass an express about Jason.

This just lets our application actually use Jason from the body that gets passed up to it inside of request.

And we're gonna change this to be a post actually instead of agate, since we actually want to create a token.

So post makes more sense than get now inside of here.

We want to get the user name so we can say constant use.

Your name is equal to request that body dot user name, and now normally you would make sure you authenticate the user first.

But as I mentioned, that's going to be in a separate video which I've already done and you can check out now that we know this user has access to our application and has passed the correct user name and password.

We want to authenticate and serialize this user with Jason Webb tokens.

Now, if you're not already familiar with Jason Webb tokens and how they work, I have an entire video talking about why you should use Jason Webb tokens and how they work.

So you can check that out again, linked in the cards and the description below for this purpose of the video, we're just gonna worry about the implementation of Jason Webb tokens, and it's really actually quite easy to create a Jason Webb token.

We just use that J W T library and we pass it DOT sign, and the sign is first going to take our payload, which is essentially what we want to serialize, and we want to serialize a user object.

So let's just create a user, and this user is going to be equal to hear just an object which has name, and we want to pass that as our user name.

And now we can say that we want to serialize our user and in order to serialize them, we need some kind of secret key.

This is going to be the next parameter and we're gonna get this from our environment Variables.

So process dot e n v dot access lifts access token secret.

And we can create this inner Dottie envy.

We can say access token secret, and we need to set this to some form of secret value and a really easy way to create a secret value.

Subtitles ListPlay Video

JWT Authentication Tutorial - Node.js

essentially

process

access

split