Node.js Tutorial: Session-based Auth 🎯

Welcome to our comprehensive guide on Session-based Authentication in Node.js! This lesson is designed for both beginners and intermediate learners who want to upskill their programming knowledge. Let's dive in!

Introduction 📝

Session-based authentication is a common technique used in web applications to maintain user sessions and authenticate users across multiple requests. In this tutorial, we'll explore how to implement session-based authentication in a Node.js application.

What is Session? 💡

A session is a mechanism that allows a web application to store and manage data for a user across multiple requests. In Node.js, we use the express-session middleware to handle sessions.

Prerequisites ✅

Before diving into session-based authentication, make sure you have a basic understanding of the following:

Node.js and npm (Node Package Manager)
Express.js (a popular web framework for Node.js)

Setting Up the Project 📝

Let's start by creating a new Node.js project and installing the necessary dependencies:

bash

mkdir session-auth-app
cd session-auth-app
npm init -y
npm install express express-session

Creating the Server 📝

Create a new file named app.js and let's set up a basic Express.js server:

javascript

const express = require('express');
const session = require('express-session');

const app = express();

// Configure session middleware
app.use(session({
  secret: 'mySecretKey',
  resave: false,
  saveUninitialized: true
}));

// Your routes will be added here

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});

User Authentication 💡

Let's create a simple user authentication function:

javascript

const users = {
  user1: 'password1',
  user2: 'password2'
};

function authenticate(req, username, password) {
  if (users[username] === password) {
    req.session.user = username;
    return true;
  }
  return false;
}

Implementing Login and Logout 📝

Now, let's create login and logout routes:

javascript

// Login route
app.post('/login', (req, res) => {
  const { username, password } = req.body;
  if (authenticate(req, username, password)) {
    res.redirect('/');
  } else {
    res.send('Invalid credentials');
  }
});

// Logout route
app.get('/logout', (req, res) => {
  req.session.destroy((err) => {
    if (err) {
      console.error(err);
    }
    res.redirect('/');
  });
});

Protected Routes 💡

Now, let's create a protected route that can only be accessed by authenticated users:

javascript

// Protected route
app.get('/protected', (req, res) => {
  if (req.session.user) {
    res.send('Welcome, ' + req.session.user);
  } else {
    res.redirect('/login');
  }
});

Testing the Application 📝

Start the server and test the login and protected routes:

bash

node app.js

Navigate to http://localhost:3000/login and enter the correct credentials to access the protected route at http://localhost:3000/protected.

Quiz 🎯

That's it for our session-based authentication tutorial! As you continue to work on your Node.js projects, remember to stay patient and persistent. Happy coding! 😊