Ask HN: Best way to authenticate Angular/node app

4 points·uberneo··5 comments

I have been searching around from past few days the best way to authenticate an Angularjs app with Node js as backend.

I have come across the link - https://github.com/sahat/tvshow-tracker/blob/master/server.js , here JSON Web Tokens are getting used so just wondering is it a good security mechanism for Angularjs Apps ? any ideas or inputs?

View on HN

I'm a newbie here, so not sure if this is the best way, but I recently implemented authentication in AngularJS/Express/Node app using passport.js and JWT on each request.

Sorry I don't have a write up, but here are some of the tutorials I followed

1. https://medium.com/opinionated-angularjs/techniques-for- authentication-in-angularjs-applications-7bbf0346acec

2. https://scotch.io/tutorials/authenticate-a-node-js-api-with-...

3. https://scotch.io/tutorials/the-ins-and-outs-of-token-based-... <- This one is good as it gives you an idea of JWT and if it makes sense to use it in your project.

Edit: improve readability

I really like Mozilla Persona (http://persona.org) and I think it is a great way to authenticate people. It uses JWTs as part of its technical stack, but it simplifies a lot of the considerations of working with them.

Persona is a better federated login system and I think it's a shame more websites aren't using it. I've blogged/presented on the topic: http://blog.worldmaker.net/2015/05/13/mozilla-persona-talk/

You can use the "Satellizer" library [0] for angular that uses JWT and can integrate with node etc. See one blog post that uses satellizer and node:

https://hackhands.com/building-instagram-clone-angularjs-sat...

[0]: https://github.com/sahat/satellizer

Scotch.io has several articles on the topic: https://scotch.io/?s=authentication

http://mherman.org/blog/2015/07/02/handling-user-authenticat...

Reply on news.ycombinator.com