arabog / authreactmongo

An application starting point with basic authentication built in. Login, Logout, Signup, Secure routes for specific users with difference clearance levels or tiered memberships

AuthReactMongo

AuthReactMongo is an open source MERN stack template with built in authentication

• Signup
• Login
• Logout
• Built in Login/Signup form
• Json Web Token
• Secure Routes by user clearance
• Secure Routes for logged in users
• Redux Thunk Integration

Installation

Quick-Start Video Guide: https://www.youtube.com/watch?v=7KQTiQAwYSU

Clone or download the repository

In the .env file of the main folder:

• Create a Mongodb database cluster at https://www.mongodb.com/
• Retrieve your connection string from the "connect" button in your clusters home page
• After clicking connect find "Connect your application"
• Copy your connection string
• Replace the text after "DATABASE:" with your Mongodb database connection string.
• Change the JWT_SECRET *this is used to encode the JSON Web Token

AuthReactMongo has two nodemodules folders to populate In the project directory:

$ yarn
$ cd client yarn
$ cd ..
$ yarn
$ yarn run dev

.env

• PORT = The port number of your server
• DATABASE = Your Mongo database string
• JWT_SECRET = The long string you use to encode your Json Web Token
• JWT_EXPIRES = Length of time the JWT is good for ex: 14d = 14 days
• JWT_EXPIRATION_NUM = Length of time the JWT is good for in milliseconds ex: 142460601000 = 14 days
• NODE_ENV = 'dev' for development || 'production' for production

authController.secure

Purpose: Secure routes from users who are not logged in.

Usage: Place on or before routes that are only available to logged in users

App Example: In use before of the secret route in routes -> authRoutes

authController.clearanceLevel

Purpose: Secure routes from users who do not hold the proper 'Clearance' credentials in their user schema.

Usage: Define the clearance levels needed to retrieve the content in the function arguments. ex authController.clearanceLevel('level 1', 'level 2')

App Example: In use before of the secret route in routes -> authRoutes

authController.blacklist

Purpose: Create a list of keywords that are rejected from req.body

Usage: Remove keywords from req.body. ex: authController.blacklist('clearanceLevel', 'version')

App Example: In use before of the secret route in routes -> authRoutes

Tech

AuthReactMongo uses the following tech stack:

• Mongodb
• Express
• React
• Nodejs
• Mongoose
• Redux

Development

Want to contribute? Great!

Todos

• Security settings
• New features

License

MIT