Passing password to get token from a third-party app, how?

I have a very basic MEVN app and not much expirience with Node. Previously I only worked with vanilla JS and REST API for about a year.My previous ventures never required complex authentications, so I just used basic, passed login and password for one technical user, got JWT token and rolled with it. My newest app, however, will require support for multiple user auth. We have admins who can help us with Kerberos-based SSO, but what next? I can't just use my own DB, I need to connect to an old-school API (company used it since 2009 and its legacy goes back to the 90s), which can only use basic auth and nothing else.Any ideas? As of now I think I have two sort of unorthodox options: 1) Authenticate user, obfuscate their password, then catch the event and send auth request to API; 2) Authenticate, store pass in Mongo, use credentials from DB to pass to API, delete entry from DB.Thanks!

Submitted January 19, 2020 at 11:59AM by buttermatter92