https://github.com/jdegand/passport-demo-ejs

Passport Session Based Authentication with Mongo
https://github.com/jdegand/passport-demo-ejs

ejs express express-session mongoose passport-local

Last synced: 8 days ago
JSON representation

Passport Session Based Authentication with Mongo

• Host: GitHub
• URL: https://github.com/jdegand/passport-demo-ejs
• Owner: jdegand
• Created: 2022-06-16T17:47:16.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2022-07-02T17:17:27.000Z (over 2 years ago)
• Last Synced: 2024-11-21T16:42:56.661Z (2 months ago)
• Topics: ejs, express, express-session, mongoose, passport-local
• Language: JavaScript
• Homepage:
• Size: 35.2 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Passport Demo EJS

## Table of contents

- [Overview](#overview)

  - [Screenshot](#screenshot)

  - [Built With](#built-with)

  - [Continued Development](#continued-development)

- [Useful Resources](#useful-resources)

## Overview

This is a session-based authentication example with passport.  This example uses mongo-connect to store sessions on the mongo database.  

### Screenshot

![](passport-demo-ejs-homepage.png)

![](passport-demo-ejs-signin.png)

![](passport-demo-ejs-protected.png)

### Built with

- bcryptjs

- connect-mongo

- ejs

- express

- express-session

- mongoose

- passport

- passport-local

### Continued Development

- res.clearCookie is not working.  However, the logout method of passport does remove the user info from the cookie.  The cookie is not deleted entirely.

- saveUnitialized is set to true when it should be false.  You want the session to begin once the user logs in.   

## Useful Resources

- [YouTube](https://www.youtube.com/watch?v=vsMpfm3RyUE) - mongo atlas changed

- [YouTube](https://www.youtube.com/watch?v=zrXBT2WPS94&list=PL62km_yqC3ZHlvkKVmR2f3W6SEzh8pRIf&index=4) - passport tutorial series

- [Mongo](https://www.mongodb.com/docs/atlas/driver-connection/) - atlas driver connection

- [Stack Overflow](https://stackoverflow.com/questions/72336177/error-reqlogout-requires-a-callback-function) - logout is now asynch

- [Github](https://github.com/jwalton/passport-api-docs) - passport api docs 

- [Medium](https://medium.com/passportjs/fixing-session-fixation-b2b68619c51d) - passport 0.6.0

- [OWASP](https://owasp.org/www-community/attacks/Session_fixation) - session fixation

- [Stack Overflow](https://stackoverflow.com/questions/33112299/how-to-delete-cookie-on-logout-in-express-passport-js) - delete cookie on logout

- [Tab Nine](https://www.tabnine.com/code/javascript/functions/express/Response/clearCookie) - clear cookie

- [NPM](https://www.npmjs.com/package/express-session) - express session

- [Stack Overflow](https://stackoverflow.com/questions/54674387/how-do-nodes-bcrypt-and-bcryptjs-libraries-differ) - probably should have used bcrypt instead

- [Stack Overflow](https://stackoverflow.com/questions/31641884/does-passports-logout-function-remove-the-cookie-if-not-how-does-it-work#:~:text=Well%2C%20you%20don't%20need,destroyed%20but%20it%20is%20invalidated.) - passport logout & cookies

- [Stack Overflow](https://stackoverflow.com/questions/27978868/destroy-cookie-nodejs) - destroy cookie