ngsengleng
commented
2 months ago - using postgreSQL to maintain usernames, encrypted passwords and jwt session tokens
- updates session tokens if expired or invalid when logging in
- creates new session tokens when signing up
- validates jwt tokens when making requests to chat websocket server via RPC (to be further improved)
- sets private routes for users but also allows for guest users (might need to differentiate somehow)
- jwt tokens are stored as httpCookies
vercel[bot]