I've been researching how to save jwt tokens in either local storage or cookies but I'm having trouble finding clear instructions online. Can someone provide guidance on how to instruct the server to recognize a user for future sessions?
//authenticate users by username
router.route('/authentication').post(function(req, res) {
User.findOne({username : req.body.username}, function(err, user){
if (err) throw err;
if (!user) {
res.json({ success: false, message: 'Authentication failed. User not found.' });
} else if (user) {
// check if password matches
if (user.password != req.body.password) {
res.json({ success: false, message: 'Authentication failed. Wrong password.' });
} else {
// if user is found and password is right
// create a token
var token = jwt.sign({usern : user.username}, app.get('superSecret'), {
//expiresInMinutes: 1440 // expires in 24 hours
});
res.cookie('auth',token);
// return the information including token as JSON
res.setHeader('token', token);
res.json({
success: true,
message: 'Enjoy your token!',
token: token
});
}
}
});
})
app.use('/api', router);