CODEWITHSUNDEEP
node.jsoauthsails.jsaccess-token
vromanch
vromanch

Reputation: 989

Best practices to implement client-server authentication

I'm looking for an best practices to implement client-server authentication (local + social). Right now I'm developing backend & frontend separately. Earlier I did auth by next flow:

Sign in -> receive token -> call api

I need find a way to add token into blacklist also. Tech stack: node.js (sails) front-end: angular

Also front-end app should be available to call api of multiple servers. That means front-end app should sign in only once at main server and be available to call another api's.

I'm opened for out-of-box solutions.

Upvotes: 1

Views: 738

Answers (1)

robertjd
robertjd

Reputation: 4913

If you are using JSON Web Tokens (JWTs) as your token: you can put a unique, random value as the jti claim in the token. You store these jti values in your database and use them as your blacklist.

If you would like to read about JWT best practices for Single Page Apps with APIs, please see a blog post I've written on this topic: Token Based Authentication for Single Page Apps

Regarding out-of-box solutions: I work at Stormapth and we have such a solution in our Stormpath Angular SDK.

Upvotes: 1

Related Questions