Comment on page
Authentication
Client-side authentication uses a JSON web token generated on the server that is then passed in each API call from the client to the server.
The token is set to automatically be appended to the header of each API call in
/client/src/app/app.jsThe client auth methods are located within the
AuthProvider defined in /client/src/app/auth.jsThe
AuthProvider handles sign-in, sign-out and checking the user's permissions and active subscription.The authentication process is:
- 1.User signs in
- 2.The server authenticates the user and generates a JWT token
- 3.The token is returned to the client and
AuthProviderstores the token - 4.When making an API call, the auth token is passed to the server
- 5.The token is verified on the server
Permissions passed from the server can also be used to create private routes on the client-side using the <PrivateRoute> component.
Last modified 2mo ago