ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Security & identity · #passport
A technical decision guide for choosing between Passport.js Local and OAuth 2.0 strategies, comparing security burdens, user friction, and implementation patterns.
Learn how to implement a decoupled authentication architecture using Passport.js Local Strategy, focusing on the separation of credential verification and session persistence.
Learn how to set up Passport‑JWT in Express for stateless authentication. The guide covers strategy configuration, token extraction, expiration handling, common pitfalls, and a practical checklist to ensure a secure, scalable API.
Learn what serializeUser and deserializeUser do, see a working local‑strategy example, and understand why you might keep them when switching to a stateless JWT approach.
Passport.js leaves the key architectural choice to you: server-side sessions with passport-local, or stateless tokens with passport-jwt. Compare the real trade-offs — revocation, scaling, CSRF, XSS — then implement and validate session auth concretely.
Request Propagation in Passport.js Passport v0.5.0 formally documented the passReqToCallback option, allowing the request object to be passed as the first argument to the verify callback. While previously associated primarily with the strategy constructor, this functionality was extended to passport.authenticate to support more dynamic configurations. Config
When implementing pagination in a Java application using Hibernate ORM, the setFirstResult() and setMaxResults() methods are used to limit the result set and define the offset. This ensures the JVM heap is not overwhelmed by large datasets. However, there is a known architectural conflict when these methods are combined with HQL fetch join operations. If a q
Passport.js utilizes the deserializeUser function to retrieve a user object from a data store based on the ID stored in the session. In a production environment using passport-local , a race condition occurs when a user record is deleted from the database while an active session cookie persists in the client's browser. If the data access layer returns null o
nodejs
express
hibernate
java