JWT Token Auth | JSON Web Tokens in Node.JS

-
When you create a REST service or any backend server for a website or an app, there is one talk about this new trending method for authenticating the user who is requesting your servers for data.

  Previously there were only a few ways to know where is the request coming from. That could be storing cookies, sessions in browsers, and using them to identify the user. So this method evolved, the trick is to create a string that has info of the user and data about the user.

  So JWT has payload, header, and signature which has info of the user and other important data. Why JSON you ask? because JSON is less verbose than XML and when encoded the size is small to easily use in HTTP transmissions.

The authorization token is passed as:
 Authorization: Bearer <token>

How it works?

  1. User signs in with username and password. 
  2. The server creates a JWT using one of the algorithms (HMAC, RSA, or ECDSA).
  3. Then this token is sent to the user and every interaction excepts a token in the header              
  4. The user can then store the token, and send it with every request
  5. If the user fails to do this, he/she has to reauthenticate with the server to obtain the token.

Diagram

Now some code:

I have created an express app in Node.JS. And some endpoints will listen:

/login: simple login with username and password, here we will create the JWT. /getData: get a request to get some data from the server.

1. Create a login endpoint, accept username and password, and send back the token.

2. Create a verification function, keep it separate so that you can play with it later



3. Another endpoint that checks the token, now it is fairly simple just add our function as middleware



Popular posts from this blog

Audio de-noising using Python (Wavelets)

-
What is audio de-noising? Audio de-nosing is a process of removing noise(unwanted sound/signals from audio). You might have heard of noise cancellation headphones, these remove all the noise from the audio.  This process has various applications in media creation and learning. Also, de-noising is not only done on audio but also done on images. There are various methods to do this. We will see 2 methods and implement one. Method 1: FFT (Fourier Transform)    There are multiple different implementations of FT: FFT (fast FT), STFT (Short time FT). Also, there are inverse for each of them IFT respectively. So what is it? In short, FFT converts signals from one form to another, in audio, the time-series signal is converted to the frequency domain. More shortly, the dominant audio (your voice) will have more power than the non-dominant(noise). The following video will explain (a really good video):  Denoising with FFT (in Python)  Method 2: Wavelets (faster than FT)    These are complicated
Read more

Using FFMPEG to trim your videos

-
 There are multiple methods to trim or clip videos with the help of FFMPEG, but sometimes looking at the documentation can confuse lots of us, and we cannot derive the output we want. And the examples on the documentation are simpler than what we want to do. So I will show few methods to combine, trim or clip video files using FFMPEG. I won't be going through installation process and will assume that you already have it installed. 1. Using timestamps to clip the video 🕐   ffmpeg -i video.mp4 -ss 00:00:00 -to 00:10:00 -c copy output.mp4   This command will copy the clip from 0 sec to 10 min without re-encoding, since we specify not to re-encode. Break down of command:      -i  : input video file     -ss : starting timestamp you can define in hh:mm:ss or just secs     -to : ending timestamp, this is the timestamp of the video     -c copy : codec is copy, which doesn't require re-encoding   If you want to copy the video from some other time to some duration    ffmpeg -ss 00
Read more

Converting HTML5 Game for Android | 2 Methods

-
HTML5 games are easy to develop and use. It has great graphics and processing capabilities. Many may wonder to convert their web apps compatible with Android. So here are two methods, which will walk you through Android development for making your web app compatible with your favorite platform. Method 1: Hosting the Game  There are various sites where you can host your HTML game for free and also earn from it. After hosting it take the link of the Game use it to make your Android game. 1. Create a new Android Project (obviously) 2. Add the following to the '.XML' file of the layout. In the above snippet, a WebView is created which takes up the whole screen. And a ProgressBar which is by default round and will appear when the page is loading. Till now there won't be any errors 😅 3. In your MainActivity.java, start by typecasting the WebView and ProgressBar. 4. Add web settings and enable JavaScript. The above code creates some basic Web Sett
Read more