iaaacdev··on What are you waiting for?What is the impact outside of academia? Are there similar effects in the corporate sector?
iaaacdev··on Ask HN: Cookies vs. JWT vs. OAuthAs long as you protect against CSRF attacks (I do not know anything about passport.js), cookie authentication is okay provided the API is not going to be consumed by external sites.