ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Security & identity · #passport
Stop embedding authentication logic in your routes. Learn how Passport.js uses the Strategy pattern to decouple credential verification from application routing for scalable auth.
Passport's local strategy leaves two decisions to you: what the verify callback returns and what goes into the session. Get both right—id-only serialization, single-purpose verify—and the rest is just routes.
Learn how Passport.js uses the strategy pattern and session serialization to decouple authentication methods from session storage, reducing route bloat and improving maintainability.
Learn how to set up Laravel Passport personal access tokens with fine‑grained scopes, protect routes, and avoid common mistakes. A step‑by‑step guide with code examples and best‑practice tips.
Learn how Passport.js splits user data between the session cookie and your data store, and how to tune this trade‑off for scalability and security.
Architecture note on the minimal Passport.js design for first-party login: passport-local strategy with express-session backed by Redis, covering trust boundaries, operational checks, failure modes, and when to switch to token-based auth.
Learn how Passport’s serializeUser and deserializeUser callbacks control what lives in the session and how to add a caching layer to avoid costly DB lookups on every request.
Learn how to configure Passport.js LocalStrategy to work with custom login field names while keeping authentication secure.
Learn how to separate authentication from session persistence using Passport.js and the Local Strategy to build secure, scalable Node.js user sessions.
express
nodejs