todos-express-password
This app illustrates how to use Passport with
Express to sign users in with a username and password.
Use this example as a starting point for your own web applications.
Quick Start
To run this app, clone the repository and install dependencies:
$ git clone https://github.com/passport/todos-express-password.git
$ cd todos-express-password
$ npm install
Then start the server.
$ npm start
Navigate to http://localhost:3000.
Tutorial
Follow along with the step-by-step Username & Password Tutorial
to learn how this app was built.
Overview
This app illustrates how to build a todo app with sign in functionality using
Express, Passport, and the passport-local
strategy.
This app is a traditional web application, in which application logic and data
persistence resides on the server. HTML pages and forms are rendered by the
server and client-side JavaScript is not utilized (or kept to a minimum).
This app is built using the Express web framework. Data is persisted to a
SQLite database. HTML pages are rendered using EJS
templates, and are styled using vanilla CSS.
When a user first arrives at this app, they are prompted to sign in. Once
authenticated, a login session is established and maintained between the server
and the user's browser with a cookie.
After signing in, the user can view, create, and edit todo items. Interaction
occurs by clicking links and submitting forms, which trigger HTTP requests.
The browser automatically includes the cookie set during login with each of
these requests.
When the server receives a request, it authenticates the cookie and restores the
login session, thus authenticating the user. It then accesses or stores records
in the database associated with the authenticated user.
Next Steps
-
Extend with credential management.
Study todos-express-password-credential-management
to learn how to use the Credential Managment
API to help the user store and select their password. -
Add social login.
Study todos-express-google
to learn how to let users sign in with their social network account, using
their existing profile and avoiding the need to sign up and repeatedly enter
account details. -
Add passwordless.
Study todos-express-webauthn
to learn how to let users sign in with biometrics or a security key.
License
Credit
Created by Jared Hanson