ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Security & identity · #passport
A technical decision guide for choosing between Passport.js Local and OAuth 2.0 strategies, comparing security burdens, user friction, and implementation patterns.
Learn how to implement a decoupled authentication architecture using Passport.js Local Strategy, focusing on the separation of credential verification and session persistence.
Learn how to set up Passport‑JWT in Express for stateless authentication. The guide covers strategy configuration, token extraction, expiration handling, common pitfalls, and a practical checklist to ensure a secure, scalable API.
Learn what serializeUser and deserializeUser do, see a working local‑strategy example, and understand why you might keep them when switching to a stateless JWT approach.
nodejs
express