Thursday 10 March 2016

Stateless JWT with no sessions - Is this for front-end only or can I use Jade as well?

I'm working on getting a JWT strategy going on Passport.js and I've had success with testing the Authorization through the header calls.However, I want to build some back-end administrative pages in Jade and I want to be able to continue passing the token when the user clicks links that get produced by Jade.Is it not a good idea to send the token through a query string in the URL? If that is the case, how can I tell Jade that any interaction with that page needs to use the token in the header?

Submitted March 11, 2016 at 12:18AM by sdawson26

No comments:

Post a Comment