Authentication
Patterns

Authentication
Patterns

Authentication
Patterns

Statefull

Stateless

Which maintains state or data or server side

Which has no state

Statefull

Statefull

Statefull

Statefull

Statefull

Number 24: DLXXXX123

Parking Ticket

Number: 24

Statefull

Number 24: DLXXXX123

Parking Ticket

Number: 24

Statefull

Number 24: DLXXXX123

Parking Ticket

Number: 24

Statefull

Number 24: DLXXXX123

Parking Ticket

Number: 24

Statefull

Number 24: DLXXXX123

Parking Ticket

Number: 24

Statefull

Parking Ticket

Number: 24

Statefull

Number 24: DLXXXX123

Number 23: DLXXXX134

Number 26: DLXXXX167

Number 27: DLXXXX123

State

Statefull

Statefull

Statefull

username / password

Statefull

username / password

session uid

Statefull

username / password

session uid

uid: 367

Statefull

uid: 367

Statefull

uid: 367

GET /users | uid: 367

Statefull

uid: 367

GET /users | uid: 367

Server checking who is user 367

Statefull

uid: 367

GET /users | uid: 367

response: all users

How to transfer uid?

cookies

response

headers

Express Flow

Auth Middleware

Checks for cookie value or uid, if valid calls next() else rejects the request

endpoint route

Statefull

Number 24: DLXXXX123

Parking Ticket

Number: 24

StateLess

Parking Ticket

Number: 24

StateLess

Parking Ticket

CarNumber 24: DLXXXX123

StateLess

Parking Ticket

CarNumber 24: DLXXXX123

StateLess

Parking Ticket

CarNumber 24: DLXXXX123

StateLess

Parking Ticket

CarNumber 24: DLXXXX123

StateLess

Parking Ticket

CarNumber 24: DLXXXX123