Authentication

Sessions y Authentication

Véase la sección Cookies y Autenticación en los apuntes del profesor

JSON Web Tokens

• jwt.io
• JWT Handbook (pdf) Sebastian E. Peyrrot
• Implementar JSON Web Tokens con NodeJS Oscar Blancarte Blog
  • Construir un API REST con NodeJS (Tercera parte)
  • Segunda parte
  • Primera Parte

OAuth

• Introducción a OAuth (Apuntes del profesor)

• [What is OAuth2? How does OAuth2 work?

  Tech Primers](https://youtu.be/CPbvxxslDTU) Yotube video

Passport

Passport: Introducción

• Passport is authentication middleware for Node.js.
• Extremely flexible and modular, Passport can be unobtrusively dropped in to any Express-based web application.
• A comprehensive set of strategies support authentication using
  • a username and password,
  • Facebook,
  • Twitter,
  • Strategy Passport-GitHub2. The author of Passport-Github has not maintained the original …
    • Passport-GitHub2 Example
  • GitHub strategy documentation and repo GitHub,
  • and more.

Passport: Tutoriales

• Example of how to use Express 4.x and Passport to authenticate users using GitHub

1
2
[~/.../useoctonode/express-4.x-github-example(master)]$ pwd -P
/Users/casiano/local/src/javascript/learning/useoctonode/express-4.x-github-example

• GitHub repo demonstrating how to use Express 4.x and Passport to authenticate users using Facebook
• Example of how to use Express 4.x and Passport for authentication with username and password
• Easy Node Authentication: Setup and Local
• Authenticating Node.js Applications With Passport
  • Repositorio con el código del tutorial
• Node.js Login System With Passport YouTube video
  • Part 1
    • What Is Input Validation and Sanitization?
    • Flash Messages: A flash message is used in order to keep a message in session through one or several requests of the same user. By default, it is removed from session after it has been displayed to the user. Flash messages are usually used in combination with HTTP redirections, because in this case there is no view, so messages can only be displayed in the request that follows redirection.
  • Part 2
  • Part 3
    • Passport-local (GitHub module repo)
    • Passport Docs: Username & Password
    • Passport Docs: Flash Messages
    • Bcryptjs at GitHub
    • Passport: sessions (serialize/deserialize)
  • GitHub repo
  • Fork at ULL-ESIT-CA-1718

Passport: Notas sobre como Configurar una WebApp en Facebook

• Facebook App Development Guide
  • Facebook: Register and Configure an App
• StackOverflow: How to Test Facebook Connect Locally

  • Facebook → Settings → Basic:

    write “localhost” in the “App Domains” field then click on “+Add Platform” choose “Web Site”.

    After that, in the “Site Url” field write your localhost url (e.g.: http://localhost:3000/login/facebook/return). This will allow you to test your facebook plugins locally.

• StackOverflow: Facebook Site URL?

Prácticas

• Práctica: Cookies, Sesiones, Autenticación y Módulos npm (p8-t3-sessions-and-modules)