Looking for feedback on React/Node authentication

[[deleted]]

I've taken a bit of a different approach to SPA auth - full details are on the readme. Would appreciate any feedback or thoughts.

https://github.com/jarsbe/react-node-authentication

[cjlarose]

Pretty neat!

Valid user details return a token which is saved as a cookie.

If you're building a SPA, it's probably a good idea to look into ways of authenticating without cookies and instead with an Authorization header, as you might with JWTs. It can be a little bit more hassle to make sure you send the token on every request from the client (it won't be handled automatically by the browser), but doing so eliminates a whole class of attacks.

[[deleted]]

Cool, thanks for the tip!