-
Book Overview & Buying
-
Table Of Contents
Full-Stack React, TypeScript, and Node - Second Edition
By :
In this chapter, we will add authentication and authorization to our Express API. In Chapter 8, we introduced the Authorization header and mentioned that it "holds token information for permissions" and that we would use it when building our JWT authentication system. In Chapter 10, we built a complete CRUD API with PostgreSQL and Prisma, but every endpoint is wide open. Anyone can create, read, update, or delete any data without identifying themselves. In a real application, this is a serious security problem. We need to know who is making each request (authentication) and whether they are allowed to perform the requested action (authorization). We will implement both using JSON Web Tokens.
In this chapter, we're going to cover the following main topics:
Change the font size
Change margin width
Change background colour