How to save a token in a local storage (or cookie)?

Question

I am trying to implement a login function in an app. Currently, I could register a login, generate a jwt token. However, I do not know how to store this token in a cookie (or local storage). I have a middleware that would require a user to send a token in each request which is private. In postman, I could put 'x-auth-token' and a token in a header. Many of the tutorials use passport, cookie-parser which seemed kinda complicated. Are there any other easier ways? I saw in the express document that there were res.cookie('x-auth-token', token); available too, I tried it but it didn't work. I also tried window.localStorage.setItem('x-auth-token', token);, still didn't work.

I have tried something super simple which is to simply put a token in a localStorage. window.localStorage.setItem('x-auth token', token); However, it didn't work.

auth

const jwt = require('jsonwebtoken');
const config = require('config');

// middleware function, next so it moves on to the next middlware
module.exports = function(req, res, next) {
  //get the token from header
  const token = req.header('x-auth-token');

  //Check if not token
  if (!token) {
    return res.status(401).json({ msg: 'No token, authorization denied' });
  }

  //Verify token if exist
  try {
    const decoded = jwt.verify(token, config.get('jwtSecret'));
    req.user = decoded.user;
    next();
  } catch (err) {
    res.status(401).json({ msg: 'Token is not valid' });
  }
};

posts.js

// @ route    POST api/users
// @desc      Register User
// @access    Public
router.post(
  '/',
  [
    check('name', 'Name is required')
      .not()
      .isEmpty(),
    check('email', 'Please include a valid email').isEmail(),
    check(
      'password',
      ' Please enter a password with 6 or more characters'
    ).isLength({ min: 6 })
  ],
  async (req, res) => {
    const errors = validationResult(req);
    if (!errors.isEmpty()) {
      return res.status(400).json({
        errors: errors.array()
      });
    }
    const { name, email, password } = req.body;

    try {
      // See if user exists, have to be unique
      let user = await User.findOne({ email });
      if (user) {
        return res
          .status(400)
          .json({ errors: [{ msg: 'User already exists' }] });
      }
      // Get users gravatar
      const avatar = gravatar.url(email, {
        s: '200',
        r: 'pg',
        d: 'mm'
      });
      user = new User({
        name,
        email,
        avatar,
        password
      });

      //encrypt password
      const salt = await bcrypt.genSalt(10);

      user.password = await bcrypt.hash(password, salt);
      // anything that return a promise, we have to put await !!
      await user.save();
      //return jsonwebtoken
      const payload = {
        user: {
          id: user.id
        }
      };

      jwt.sign(
        payload,
        config.get('jwtSecret'),
        { expiresIn: 60 * 60 * 100 },
        (err, token) => {
          // window.localStorage.setItem('x-auth-token', token);
          res.json({ token });
          res.cookie('x-auth-token', token);
          // req.flash('You seccessfully registered your account');
          // res.redirect('/user/login');
        }
      );
    } catch (err) {
      console.error(err.message);
      res.status(500).send('Server error');
    }
  }
);

main.handlebars





    
    
    
    
    

    {{!-- for auto-reload --}}
    
    


    Idea Share




    
        Idea Share
        
            
                Sign up
            
            
                Log in
            
        
    
    
        {{{body}}}

register.handlebars


    
        
            Create your account
            
                
                    
                

                
                    
                  

                
                    
                
                
            
            Already have an account? Sign in

post.handlebars


    
        
            Share your idea

Ameerudheen.K · Accepted Answer

You cannot save item to localstorage in nodejs. First sent your Response to client side and save the the res token to Browser local storage using localStorage.setItem('x-auth-token', token);.

on client side use your token as :-

http.post('/', userCredentials).then(response => {
    window.localStorage.setItem('x-auth-token', response.token)
  }
  );

How to save a token in a local storage (or cookie)?

Answers (1)

Related Questions