몽고 DB 기초 5

Login and Hash

• Database : MongoDB
• Client : Advanced REST client
• Password encryption : npm bcrypt library

Checking user info in collection(before password hashing

• 

User password after hashing

• 

User login failed with wrong password

• 

Token

With json web token npm library, a token is created like below.

const token = jsonWebToken.sign(user._id.toHexString(), 'myToken')

• Client : setting the token into cookie
• Server : setting the token into database

Configuration

During connecting MongoDB using mongoose/express, database info such as username and password is required and can be seen in codes. Also, sensitive information such as API key should not be displayed in public neither. Thus, environment variable/file is needed to manage that.

// Environment variable in Node.js
// The process.env property returns an object containing the user environment.
process.env // global object. approachable in whole application.