In this tutorial, I build a user login and session management system from scratch in Node and Express, starting with a simple cookie-based session counter and progressively adding file-based persistence, user accounts, logout, and password authentication using bcrypt. I also cover input sanitisation, secure cookies, and enforcing HTTPS behind an NGINX proxy. The tutorial is aimed at readers with basic familiarity with Node and Express...
While getting a web app ready for alpha testing with real user data, I needed to add login authentication. My post is mostly a recommendation for a video by Valentin Despa that explains the big picture of implementing authentication in an Express app with Passport, a gap left by more detailed tutorials...
