Token Based Authentication in Node.js using JWT (JSON Web Tokens) + MySQL Example

Node js Token Based JWT Authentication using Express with MySQL Example

#nodejsjwtauthentication #nodejsexpressjwt #nodejssecurity
#nodejsexpresssecurity #jwtexpresssecurity

“How to implement a Nodejs JWT Authentication?” is one of the most common question in the development world? So in the tutorial, I will introduce details step by step how to do it with 100% running coding example by Express RestAPIs, JSON Web Token, BCryptjs, Sequelize and MySQL/PostgreSQL database.

0. JSON Web Token

JSON Web Token (JWT) defines a compact and self-contained way for securely transmitting information between parties as a JSON object.

Scenarios where JSON Web Tokens are useful:

Authorization: the most common scenario for using JWT. Single Sign On is a feature that widely uses JWT
Information Exchange: Because JWTs can be signed, JSON Web Tokens are a good way of securely transmitting information between parties.
JSON Web Tokens consist of 3 parts:

Header
Payload
Signature
JWT looks like Header-Base64-String.Payload-Base64-String.Signature-Base64-String

I. Workflow
We define 5 workflows as below:

1. SignUp Scenarios

- Verify UserName & Email
- If NOT Duplicate (UserName & Email), verify Roles are existed.
- If Roles are available, save User Info to database by Sequlieze ORM
- Othercase, Eror code will be returned

2. SignIn Scenarios

- Find User record in database by username
- If User is existed, check password is Valid or NOT
- If password is valid, create JWT then return JWT token back to client
- Othercase, Error code will be returned

3. Access User Content

- Verify JWT Token
- If token is valid, controller will load & return User Info back to client
- Othercase, Error Code will be returned

4. Access PM Content

- Verify JWT Token
- If token is valid, verify PM role.
- If User has Admin or PM role, controller will load & return Management Content to client.
- Othercase, Error code will be returned

5. Access Admin Content

- Verify JWT Token
- If token is valid, verify ADMIN role.
- If User has Admin role, controller will load & return Admin Content to client.
- Othercase, Error code will be returned

II. Video Guide Structure

0:00 - Review Overall Debug Processing: Nodejs Token Based JWT Authentication
0:35 - Start Review Article: Node js Token Based JWT Authentication using Express with MySQL Example
0:44 - SignUp Scenarios
0:52 - SignIn Scenarios
1:01 - Access User Content Scenarios
1:08 - Access PM Content Scenarios
1:15 - Access Admin Content Scenarios

1:24 - Download Sourcecode
1:33 - Install nodejs dependencies
1:38 - Import Nodejs project to Visual Studio Code
1:41 - Review Nodejs Project Structure
2:52 - Start Debug Nodejs project

--DEBUG--

3:01 - Start Debug SignUp Jack with USER_ROLE
4:09 - Start Debug SignUp Adam with PM_ROLE and USER_ROLE
5:23 - Start SignUp Thomas with ADMIN_ROLE

5:57 - Start Debug SignIn Jack with USER_ROLE to get JWT Authentication
6:46 - Jack access resources at /api/test/user successfully
7:48 - Jack try to access resouces at /api/test/pm - Fail because do NOT have permission
8:44 - Jack try to access resource at /api/test/admin - Fail because of Do NOT have permission
9:29 - Debug - SignIn with user Adam (having PM and User roles) to get JWT authentication
10:06 - Adam try to access resource at /api/test/pm - successfully.
11:04 - Adam try to access resource at /api/test/user - successfully
11:31 - Adam try to access resource at /api/test/admin - FAIL - Dont have permission
12:11 - try to login with Thomas user with ADMIN_ROLE
12:45 - Thomas try to access resource at /api/test/admin - successfully
13:45 - Thomas try to acces PM resouces - successfully
14:05 - try to access resouces with WRONG JWT - FAIL

III. Related post:

1. Angular 10 Spring Boot JWT Authentication Example – Angular 6, 8, 9, 10 + Spring Security + MySQL/PostgreSQL

2. Django RestAPIs Tutorial – Build Post/Get/Put/Delete request Examples to MySQL/PostgreSQL databases

3. Angular & Nodejs JWT Authentication fullstack Example | Angular 6, 7, 8, 9 – Express RestAPIs + JWT + BCryptjs + Sequelize + MySQL/PostgreSQL

Node js Token Based JWT Authentication using Express with MySQL Example