I have started using NodeJS with Express JS and PassportJS and JWT for User Authentication. I am able to authenticate the user and generate JWT Token. I am using Bootstrap for my front-end.
By using Postman I am able to get the token and put it in the next request header and it is working fine.
But how do I do this in HTML Pages using JavaScript?
- JavaScript to get response body or response headers
- JavaScript to set request header with JWT Token
Here is the snippet to store data in SessionStorage:
sessionStorage.setItem('token', 'token-abcd1234'); var token = sessionStorage.getItem('token'); I have a mechanism to invalidate the token on logout by putting them in a DB.
Let me know if I am missing any pattern or missing anything.
Note: I am using login.html which has a form with a username and password. AJAX is not used.
Login Page
<body> <div class="container"> <h3>Login</h3> <div class="jumbotron col-sm-6"> <form class="form-horizontal" action="/login" method="POST"> <div class="form-group"> <label class="control-label col-md-2" for="email">Email:</label> <div class="col-md-4"> <input type="email" class="form-control" id="email" placeholder="Enter email" name="email"> </div> </div> <div class="form-group"> <label class="control-label col-md-2" for="password">Password:</label> <div class="col-md-4"> <input type="password" class="form-control" id="password" placeholder="Enter password" name="password"> </div> </div> <div class="form-group"> <div class="col-md-offset-2 col-md-10"> <button type="submit" class="btn btn-default">Submit</button> </div> </div> </form> </div> </div> </body> NodeJS Route
router.get('/login', function(req, res, next) { res.render('login'); }); router.post('/login', function(req, res, next) { passport.authenticate('local', function(err, user, info) { if (err) { return next(err); } if (!user) { return res.status(401).json({ err: info }); } req.logIn(user, function(err) { if (err) { console.log(err); return res.status(500).json({ err: 'Could not log in user' }); } var token = Verify.getToken(user); res.status(200).json({ status: 'Login successful!', success: true, token: token }); }); })(req,res,next); }); 
