Managing Multiple Identity Providers with Passport.js Strategies
Learn how to use the Strategy pattern in Passport.js to support multiple identity providers while maintaining a unified user session and secure database integration.
Loading…
ReadMeFeed / Community knowledge
Passport
Real questions. Useful conversations. Find the people who know your stack.
Passport
Security & identity · #passport
Keeping Passport Sessions Tiny: serializeUser, middleware order, and the per‑request lookup trade‑off
Passport.js sessions can balloon if you store the whole user profile. This blog explains why keeping the session tiny—by serializing only an ID—matters, how to order middleware correctly, and the trade‑off of a per‑request database lookup.
nodejsSecuring Express Apps with Passport Local Strategy: A Practical Walk‑through
Learn how to wire Passport’s LocalStrategy with bcrypt, express‑session, and route guards to build a minimal, production‑ready username/password login flow.
Choosing Between Passport.js LocalStrategy and OAuth 2.0 Strategies for Node.js Authentication
Decide whether to store credentials locally or delegate login to an external provider when using Passport.js in a Node.js app.
Implementing Username and Password Authentication with Passport LocalStrategy
Learn how to implement secure username and password authentication using Passport.js LocalStrategy, including session management and password hashing integration.
Adding Username/Password Login to an Express App with Passport.js Local Strategy
Step‑by‑step guide to add username/password login with Passport.js local strategy, session handling, and route protection in a Node.js Express app.
expressPassport Session Serialization: How serializeUser and deserializeUser Keep Users Authenticated
Passport's serializeUser and deserializeUser bridge the gap between login and subsequent requests. Here is how they work, a minimal example, and the trade-offs.
Architecture Note: Using Passport.js Local Strategy in a Node.js REST API
Architecture guide for integrating Passport.js Local Strategy into a Node.js REST API, covering requirements, minimal design, trust boundaries, failure checks, and when to reconsider the approach.
Stateless JWT Authentication with Passport.js: Skip Sessions and SerializeUser
Learn how to configure Passport.js for stateless JWT authentication by disabling sessions and skipping serializeUser/deserializeUser, with a working example and security considerations.