Login Flow

[yinanfang]

Server

• [x] Use Express router to separate process

JWT:

• [x] Use 'Authorization' header. Not 'authorization' or any other one
• [x] Mongoose for db connection
• [x] Store password with bcrypt: https://www.npmjs.com/package/bcryptjs
  • [x] Online calculator: https://www.dailycred.com/article/bcrypt-calculator
• [x] Basic Mongoose setup: https://github.com/sitepoint-editors/MEAN-stack-authentication/blob/master/app_api/controllers/authentication.js
  • https://www.sitepoint.com/user-authentication-mean-stack/
  • Integrate passport: https://github.com/jaredhanson/passport
  • passport-local
  • passport-qq

Token Structure: { userId: xxx, scope: [admin, user], }