Skip to content

NestJS Authentication Demo with AuthToken and RefreshToken, MongoDB as Database and PassportJS as Authentication Middleware Library

Notifications You must be signed in to change notification settings

manojsethi/nest_auth_demo_refresh_token

Repository files navigation

NestJS Authentication Demo with AuthToken and RefreshToken, MongoDB as Database and PassportJS as Authentication Middleware Library

This is a base of a new project that require credentials authentication.

Technologies Used

  • NestJS
  • ExpressJS
  • MongoDB
  • PassportJS(JWT)
  • argon2

Frontend - NextJS(Next-Auth) - https://github.com/manojsethi/next-auth-demo

You can replace the file env.example to .env in your local environment and replace the values with real values

You can create the secret keys with the below little utility

node -e "console.log(require('crypto').randomBytes(48).toString('hex'))"
OR
node -e "console.log(require('crypto').randomBytes(48).toString('base64'))"

Usage/Examples

npm i

npm run start:dev

API can be listened at localhost 3000

API Reference

Sign Up a new user

  POST /auth/signup
Parameter Type Description
name string Required. Name of the person signing up
email string Required. Email of the person signing up
password string Required. Password of the person signing up

Password is hashed and saved in the db.

Example

{
    "name": "Manoj",
    "email": "manojsethi@manojsethi.com",
    "password": "MyRandomPassword"
}

Auth Endpoints

SignIn

  GET /auth/signin
Parameter Type Description
email string Required. Email of the person signing in
password string Required. Password of the person signing in

Example

{
    "email": "manojsethi@manojsethi.com",
    "password": "MyRandomPassword"
}

SignIn

  POST /auth/signin
Parameter Type Description
email string Required. Email of the person signing in
password string Required. Password of the person signing in

Example

{
    "email": "manojsethi@manojsethi.com",
    "password": "MyRandomPassword"
}

After you are logged in you need to set the Authorization Header with the value of Bearer {{AccessToken}} in order to access the further API

RefreshToken

  GET /auth/refresh

NOTE You need to pass Authorization Header with Bearer {{RefreshToken}} (RefreshToken received in signin request) to get the new pair of tokens.

  GET /auth/logout

NOTE You need to pass Authorization Header with Bearer {{AccessToken}} (AccessToken received in signin request) as Logout is a secured route and is authenticated by AccessToken.

Users Endpoints

Get All Users

  GET /users

Get User By ID

  GET /users/:id

Update User By ID

  PATCH /users/:id
Parameter Type Description
name string Optional Name of the person
email string Optional Email of the person
password string Optional Password of the person

Example

{
    "email": "manojsethi@manojsethi.com",
    "password": "MyRandomPassword"
}

Delete User By ID

  DELETE /users/:id

🚀 About Me linkedin

I'm a full stack developer working with Javascript Technologies. I have experience with

  • NodeJS
  • NestJS
  • TypeScript
  • ReactJS
  • NextJS
  • Docker
  • Kubernetes
  • AWS/Digital Ocean/GCP
  • NGINX
  • GraphQL