[{"_1":2,"_173":-5,"_174":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_149":150},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_97":-5,"_98":99,"_138":-5,"_139":11,"_140":21,"_141":11,"_142":-5,"_143":11,"_144":-5,"_145":146,"_147":100,"_148":-7},"canonicalUrl","https://hub.docker.com/r/pier276/level-0-basic-token-auth/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","pier276","reponame","level-0-basic-token-auth","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_53":54,"_56":57,"_58":59,"_60":11,"_61":62,"_63":64,"_65":66,"_43":35,"_32":33,"_68":69,"_70":55,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":72,"_79":80,"_81":11,"_82":33,"_83":84,"_89":11,"_90":91,"_95":33,"_96":-5},"categories",[42,47,50],{"_43":44,"_45":46},"name","API management","slug","api-management",{"_43":48,"_45":49},"Web servers","web-servers",{"_43":51,"_45":52},"Databases & storage","databases-and-storage","content_types",[55],"image","date_registered","2025-04-17T14:19:36.80109Z","description","This is the most basic implementation of JWT-based authentication.","is_private","last_updated","2025-04-17T14:19:36.855741Z","last_modified","2025-04-17T17:51:07.961259Z","media_types",[67],"application/vnd.docker.container.image.v1+json","pull_count",422,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n $\"Zero$ \n

\n\n# Level 0 — Basic JWT Token Authentication\n\nThis is the most basic implementation of JWT-based authentication using `login` and `password` credentials. Upon successful login, the server returns a signed JWT in the response body, which the client must store and send with each request using the `Authorization` header. The security middleware verifies the JWT token, extracts the user ID from its payload, and injects this ID into the request object for downstream processing.\n\n

⚠ Security Advisory: Current JWT authentication level lacks production-grade security measures

\n\n## Table of Contents\n\n- Features\n- Tech Stack\n- How It Works\n- Endpoints\n- Example Request\n- Security Notes\n- Testing\n- Installation\n - GitHub\n - Docker Image\n- Environment Variables\n- Running the App\n- License\n\n## Features\n\n### Authentication\n\n- Basic user authentication with login and password functionality\n- JWT tokens for secure session management\n\n### Authorization\n\n- **Secure Routes**: `Authorization: Bearer ` header required for protected routes, ensuring that only authenticated users can access sensitive data or perform critical actions.\n\n### Database Management\n\n- **Prisma ORM**: Utilize Prisma's type-safe PostgreSQL interactions to simplify database queries and schema management.\n- **Database Schema**: Leverage a pre-defined database schema for efficient data storage and retrieval.\n\n### Data Validation and Integrity\n\n- **DTO-based Request/Response Schemas**: Ensure data consistency and security with request/response schemas based on Data Transfer Objects (DTOs).\n- **Validation Middleware**: Built-in validation middleware to catch and handle invalid input data.\n\n### Security Measures\n\n- **Built-in Middleware**: Deployed with CORS, Helmet, and rate limiting for comprehensive security protection.\n- **Cross-Site Scripting (XSS) Protection**: Helmet middleware ensures that user input is properly sanitized to prevent XSS attacks.\n- **Rate Limiting**: Mitigate brute-force attacks by enforcing reasonable request limits.\n\n### Testing Framework\n\n- **End-to-End Test Suite**: Utilize Supertest for comprehensive testing of API endpoints, ensuring seamless integration with the application.\n- **Test Coverage**: Robust test coverage ensures that critical functionality is thoroughly validated and reliable.\n\n### Documentation and Discovery\n\n- **Interactive Swagger UI**: Access an interactive and user-friendly documentation interface at `/api`, providing a clear understanding of available endpoints and parameters.\n\n### Deployment and Containerization\n\n- **Docker Support**: Leverage Docker containers for efficient deployment, isolation, and scalability.\n\n## Tech Stack\n\n- **Backend Framework:** [NestJS](https://nestjs.com)\n- **Programming Language:** [TypeScript](https://www.typescriptlang.org/)\n- **Database:** [PostgreSQL](https://www.postgresql.org/)\n- **ORM:** [Prisma](https://www.prisma.io/orm)\n- **Authentication:** [JWT](https://jwt.io/)\n- **API Documentation:** [Swagger](https://swagger.io/)\n- **Rate Limiting:** [NestJS Throttler](https://docs.nestjs.com/security/rate-limiting)\n- **Password Hashing:** [Bcrypt](https://www.npmjs.com/package/bcrypt)\n- **Security Enhancements:** [Helmet](https://www.npmjs.com/package/helmet)\n- **Testing:** [Supertest](https://www.npmjs.com/package/supertest)\n\n## How It Works\n\n### 1. User Sign-Up or Sign-In\n\nThe journey begins when a user attempts to register or log in through our application. They send their credentials (login and password) to one of two routes:\n\n- `/auth/sign-up`: For new users who want to create an account.\n- `/auth/sign-in`: For existing users who need to authenticate.\n\n### 2. Server Verification\n\nThe server receives the user's request and verifies their credentials against the database. If everything checks out, we proceed with the next step.\n\n### 3. JWT Token Generation\n\nUpon successful verification, the server generates a JSON Web Token (JWT) for the user. This token contains essential information about the user, such as their ID.\n\n### 4. Client-Side Token Storage\n\nThe client-side application receives the JWT token from the server and stores it securely for future use. You can use LocalStorage or SessionStorage to store the token on the client side.\n\n### 5. Protected Route Access\n\nWhen a user attempts to access a protected route, their client-side application sends the stored JWT token in an `Authorization` header with each request:\n\n`Authorization: Bearer `\n\n### 6. Backend Verification and Authorization\n\nThe backend server receives the request and verifies the validity of the JWT token. If everything checks out, it grants access to the protected route.\n\n## Endpoints\n\n| Method | Endpoint | Description | Required Body |\n| ------ | --------------- | ------------------------------- | ----------------------------------- |\n| POST | `/auth/sign-up` | Register a new user and get JWT | `login`: string, `password`: string |\n| POST | `/auth/sign-in` | Login and get JWT | `login`: string, `password`: string |\n\nFor a detailed overview of the available API endpoints, request/response structures, and data models, the Swagger documentation is available at `/api`. This documentation provides interactive API exploration and helps developers understand and integrate with the API efficiently.\n\n## Example Request\n\n```http\nPOST /auth/sign-up\n{\n \"login\": \"Pier228\n \"password\": \"password123\"\n}\n```\n\n### Response\n\n```json\n{\n \"token\": \"eyJhbGciOiJIUzI1NiIsInR5...\"\n}\n```\n\n### Use in headers\n\n```bash\nAuthorization: Bearer \n```\n\n## Security Notes\n\nThis JWT authentication implementation is designed for educational purposes or prototyping, but it's not recommended for production use due to several security limitations. The current implementation falls short in several critical areas:\n\n- **Refresh Token Mechanism**: There is no refresh token in place, making it difficult for users to obtain a new token when their current one expires.\n- **Logout / Token Invalidation**: Users cannot log out or invalidate their tokens, potentially leaving their accounts vulnerable to unauthorized access.\n\n## Testing\n\nTo ensure the application is working correctly, comprehensive testing has been implemented to cover all aspects of the JWT authentication flow. The application utilizes Supertest for E2E testing, which allows making HTTP requests directly from test code and verifying expected responses. Here's a snapshot of the test results:\n\n $\"Test$ \n\nAs you can see, all tests passed successfully. This gives confidence in the correctness of the JWT authentication implementation and ensures it works as expected in different scenarios. You can also run this test cases using `npm run test:e2e` command.\n\n## Installation\n\n### GitHub\n\n```bash\n$ git clone https://github.com/Pier228/ultimate-auth-guide.git\n$ cd jwt-based-auth\n$ cd level-0-basic-token-auth\n$ npm install\n```\n\n### Docker Image\n\nThe Docker image for this project is available on [Docker Hub](https://hub.docker.com/r/pier276/level-0-basic-token-auth).\n\n[![Docker Hub](https://img.shields.io/badge/Docker-Hub-blue)](https://hub.docker.com/r/pier276/level-0-basic-token-auth)\n\n## Environment Variables\n\nTo run this application, you need to configure several environment variables.\n\n1. Create a .env file in the root directory of the project.\n2. Add required environment variables:\n\n- `PORT`: The port on which the server will run. This field is **optional**. By default will run on 3000 port.\n- `DATABASE_URL`: MongoDB connection URL used to connect to the database.\n- `SALT_ROUNDS`: Number of rounds for hashing passwords (bcrypt).\n- `JWT_SECRET`: Secret key for signing and verifying JWT tokens.\n- `CORS_ALLOWED_ORIGIN`: The URL of the domain from which it is allowed to send requests to the server (CORS settings).\n\nYou can also refer to the .env.example file for a complete list of required environment variables.\n\n## Running the app\n\nAfter setting up the .env file, you can start the application using the following commands:\n\n```bash\n# Generate prisma client\n$ npx prisma generate\n\n# Build the application\n$ npm run build\n\n# Start in development mode\n$ npm run start\n\n# Start in watch mode\n$ npm run start:dev\n\n# Start in production mode\n$ npm run start:prod\n```\n\n## License\n\nThis project is licensed under the MIT License - see the LICENSE file for details.\n","has_starred","hub_user","immutable_tags_settings",{"_85":11,"_86":87},"enabled","rules",[88],".*","is_automated","permissions",{"_92":21,"_93":11,"_94":11},"read","write","admin","user","storage_size","orgData","recentTags",[100],{"_101":55,"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_61":127,"_128":103,"_129":33,"_130":67,"_43":131,"_132":133,"_134":118,"_135":127,"_136":76,"_137":21},"content_type","creator",23505473,"digest","sha256:0067df3a8e203adc2dcee302870c30c5b52160655aa5f8e9a893519fba7c807b","full_size",285525164,"id",884272438,"images",[112],{"_113":114,"_104":105,"_115":116,"_117":118,"_119":120,"_121":122,"_123":116,"_124":-5,"_125":107,"_73":76,"_126":-5},"architecture","amd64","features","","last_pulled","2026-09-22T15:24:48.679319565Z","last_pushed","2025-04-17T14:19:35.347921451Z","os","linux","os_features","os_version","size","variant","2025-04-17T14:19:35.794482Z","last_updater","last_updater_username","media_type","latest","repository",27087283,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":151,"_161":162,"_145":171,"_172":11},{"_40":152,"_53":156,"_56":57,"_58":59,"_60":11,"_61":62,"_63":64,"_65":157,"_43":35,"_32":33,"_68":69,"_70":55,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":72,"_79":80,"_81":11,"_82":33,"_83":158,"_89":11,"_90":160,"_95":33,"_96":-5},[153,154,155],{"_43":44,"_45":46},{"_43":48,"_45":49},{"_43":51,"_45":52},[55],[67],{"_85":11,"_86":159},[88],{"_92":21,"_93":11,"_94":11},"tags",{"_163":74,"_164":-5,"_165":-5,"_166":167},"count","next","previous","results",[168],{"_101":55,"_102":103,"_104":105,"_106":107,"_108":109,"_110":169,"_61":127,"_128":103,"_129":33,"_130":67,"_43":131,"_132":133,"_134":118,"_135":127,"_136":76,"_137":21},[170],{"_113":114,"_104":105,"_115":116,"_117":118,"_119":120,"_121":122,"_123":116,"_124":-5,"_125":107,"_73":76,"_126":-5},[],"canDeleteTags","actionData","errors"]

pier276/level-0-basic-token-auth

Tags for pier276/level-0-basic-token-auth