For that reason, you'll start by setting up Auth0 to interact with a real authentication server throughout the tutorial. This tutorial's core objective is to teach you how to set up real-world authentication in a Node.js Express app. Set Up Real-World Authentication for Node.js If you need to install Node.js and npm, use any of the official Node.js installers provided for your operating system. We tested this tutorial using Node.js v12.

You'll secure the login portal for a restaurant named WHATABYTE using Passport.js with Auth0: 🛠️️ To see the app in action, visit http : / /localhost : 3000 on your browser. Check out the npm script commands present in package. 🛠️️ In a separate terminal window, serve the client from a static server using Browsersync under the hood: npm run uiīrowsersync proxies the server running on port 8000 with nodemon. 🛠️️ Run the server using nodemon under the hood: npm run dev

🛠️️ Install the project dependencies: npm i 🛠️️ Make wab -portal -express the current working directory: cd wab-portal-express 🛠️️ Clone the project repository: git clone -b starter quickly copy commands, triple-click them to select them fully. If you are starting from this chapter, follow these steps to set up a simple web app built with Express and Pug, which is the basis for this chapter's security exercises: Look for the 🛠️️ emoji if you'd like to skim through the content while focusing on the build steps.

The client is server-side rendered using Pug templates styled with CSS. You'll use Passport.js with Auth0 to manage user authentication and protect routes of a client that consumes an API. In this tutorial, you'll learn how to secure Node.js web application built with the Express framework.

Passport node js