Lars

German developer, who likes to play with everything that comes in his way

Dec 28, 2016

I prefer writing my own. For me passport was always blocking me.

Simple example. I tried two-factor authentication with passport. Needed like 5 hours and it still didn´t work. Completely removed passport and implemented two-factor by myself, after 30 minutes it was done working.

Saras Arya

Senior Software Engineer at Rentomojo

Dec 28, 2016

@KapuzenSohn How did you manage sessions? Did you write your own thing? It's amazing that so much NodeJS development has taken place and still no good Auth Model in NodeJS.

Lars

German developer, who likes to play with everything that comes in his way

Dec 28, 2016

I solved it most times by generating a token, save it in a redis database with an expiration of 7 days. After that I send the client the token. The client saves it as cookie and in each request the token needs to be in the header. On the server side I take the token from the header and check if it in the database. Because of the expire function from redis I don´t need to remove old tokens.

Saras Arya

Senior Software Engineer at Rentomojo

Jan 3, 2017

Okay. So that is one good way of doing it. I am seriously looking at making something like this into an NPM/Yarn Package. Not really good open source auth packages out there.

Lars

German developer, who likes to play with everything that comes in his way

Jan 3, 2017

yeah definitely agree with that. If you do I would be glad to help :)

Search Hashnode