JWT & OAuth2

What is JWT & OAuth2?

JWT and OAuth2 are the established building blocks used to implement secure sign-in and authorisation on the web, and they solve two distinct jobs. OAuth2 governs the flow through which an application gains access on a user's behalf without ever seeing their password. A JWT is the compact, signed token that then travels with every request and can be checked without a round trip to the database. On top of them we build logins, cross-system single sign-on and finely graded permissions to industry standard.

import jwt from "jsonwebtoken";

const token = jwt.sign({ sub: user.id }, secret, { expiresIn: "15m" });

const payload = jwt.verify(token, secret);
console.log(payload.sub);