4 ms·

Ask HN: Best way to authenticate Angular/node app

4 points by uberneo 11y ago

I have been searching around from past few days the best way to authenticate an Angularjs app with Node js as backend. I have come across the link - https://github.com/sahat/tvshow-tracker/blob/master/server.js , here JSON Web Tokens are getting used so just wondering is it a good security mechanism for Angularjs Apps ? any ideas or inputs?

codegeek 11y ago
You can use the "Satellizer" library [0] for angular that uses JWT and can integrate with node etc. See one blog post that uses satellizer and node: https://hackhands.com/building-instagram-clone-angularjs-satellizer-nodejs-mongodb/ https://hackhands.com/building-instagram-clone-angularjs-sat... [0]: https://github.com/sahat/satellizer https://github.com/sahat/satellizer
theaccordance 11y ago
Scotch.io has several articles on the topic: https://scotch.io/?s=authentication https://scotch.io/?s=authentication
bjacobt 11y ago
I'm a newbie here, so not sure if this is the best way, but I recently implemented authentication in AngularJS/Express/Node app using passport.js and JWT on each request. Sorry I don't have a write up, but here are some of the tutorials I followed 1. https://medium.com/opinionated-angularjs/techniques-for- https://medium.com/opinionated-angularjs/techniques-for- authentication-in-angularjs-applications-7bbf0346acec 2. https://scotch.io/tutorials/authenticate-a-node-js-api-with-json-web-tokens https://scotch.io/tutorials/authenticate-a-node-js-api-with-... 3. https://scotch.io/tutorials/the-ins-and-outs-of-token-based-authentication https://scotch.io/tutorials/the-ins-and-outs-of-token-based-... <- This one is good as it gives you an idea of JWT and if it makes sense to use it in your project. Edit: improve readability
WorldMaker 11y ago
I really like Mozilla Persona (http://persona.org http://persona.org) and I think it is a great way to authenticate people. It uses JWTs as part of its technical stack, but it simplifies a lot of the considerations of working with them. Persona is a better federated login system and I think it's a shame more websites aren't using it. I've blogged/presented on the topic: http://blog.worldmaker.net/2015/05/13/mozilla-persona-talk/ http://blog.worldmaker.net/2015/05/13/mozilla-persona-talk/
mjhea0 11y ago
http://mherman.org/blog/2015/07/02/handling-user-authentication-with-the-mean-stack/#.VeJ5-lNViko http://mherman.org/blog/2015/07/02/handling-user-authenticat...

4 points by uberneo 11y ago

codegeek 11y ago

You can use the "Satellizer" library [0] for angular that uses JWT and can integrate with node etc. See one blog post that uses satellizer and node: https://hackhands.com/building-instagram-clone-angularjs-satellizer-nodejs-mongodb/ https://hackhands.com/building-instagram-clone-angularjs-sat... [0]: https://github.com/sahat/satellizer https://github.com/sahat/satellizer

theaccordance 11y ago

Scotch.io has several articles on the topic: https://scotch.io/?s=authentication https://scotch.io/?s=authentication

bjacobt 11y ago

I'm a newbie here, so not sure if this is the best way, but I recently implemented authentication in AngularJS/Express/Node app using passport.js and JWT on each request. Sorry I don't have a write up, but here are some of the tutorials I followed 1. https://medium.com/opinionated-angularjs/techniques-for- https://medium.com/opinionated-angularjs/techniques-for- authentication-in-angularjs-applications-7bbf0346acec 2. https://scotch.io/tutorials/authenticate-a-node-js-api-with-json-web-tokens https://scotch.io/tutorials/authenticate-a-node-js-api-with-... 3. https://scotch.io/tutorials/the-ins-and-outs-of-token-based-authentication https://scotch.io/tutorials/the-ins-and-outs-of-token-based-... <- This one is good as it gives you an idea of JWT and if it makes sense to use it in your project. Edit: improve readability

WorldMaker 11y ago

I really like Mozilla Persona (http://persona.org http://persona.org) and I think it is a great way to authenticate people. It uses JWTs as part of its technical stack, but it simplifies a lot of the considerations of working with them. Persona is a better federated login system and I think it's a shame more websites aren't using it. I've blogged/presented on the topic: http://blog.worldmaker.net/2015/05/13/mozilla-persona-talk/ http://blog.worldmaker.net/2015/05/13/mozilla-persona-talk/

mjhea0 11y ago

http://mherman.org/blog/2015/07/02/handling-user-authentication-with-the-mean-stack/#.VeJ5-lNViko http://mherman.org/blog/2015/07/02/handling-user-authenticat...