Seeking guidance on clearing a cookie after the 15-second lifetime of a JWT token. Is this task best accomplished on the server side or can it be managed on the client side? Code snippet with description provided below
Utilizing mongoose, a user model is created and a JWT token is added to it.
const mongoose = require('mongoose');
const jwt = require('jsonwebtoken');
const userSchema = new mongoose.Schema({
email: { type: String, required: true },
password: { type: String, required: true },
});
userSchema.methods.generateAuthToken = function() {
const token = jwt.sign({ _id: this._id }, process.env.JWTPRIVATEKEY, {expiresIn: "15s"})
return token
};
const User = mongoose.model('users', userSchema);
module.exports = { User }
const router = require('express').Router();
const { User } = require('../models/User');
router.post('/', async (req, res) => {
try {
const user = await User.findOne({ email: req.body.email });
const token = user.generateAuthToken();
res.status(200).send({ data: token, message: "Logging in is successful" });
} catch (error) {
console.log(error);
res.status(500).send({ message: 'Internal Server Error' })
}
});
data: token This key is issued by JWT. Note that it represents the JWT token generated during user creation as shown in the previous code.
Following is a basic form where a request is made and a token is received in response, then stored in cookies
import { Cookies } from "react-cookie";
const cookies = new Cookies();
const handleChange = ({ currentTarget: input }) => {
setData({ ...data, [input.name]: input.value });
};
const handleSubmit = async (event) => {
event.preventDefault();
try {
const url = "http://localhost:8080/api/auth";
const { data: res } = await axios.post(url, data);
cookies.set('token', res.data);
} catch (error) {}
<form onSubmit={handleSubmit}>
<input type="email" name={"email"} value={data.email} onChange={handleChange} required placeholder={"Email"} />
<input type="password" name={"password"} value={data.password} onChange={handleChange} required placeholder={"Password"} />
<button type="submit">Login</button>
</form>
This link leads to the JWT token referenced above. https://i.stack.imgur.com/RZaaL.png