InsideEdgeInsideEdge
Download App

Phase 10 · Authentication & Authorization

Topics

Sessions

Part of the Backend Developer Roadmap.

Summary

A server-side mechanism for remembering a logged-in user across requests, typically by storing session data server-side (or in Redis) and identifying it via a cookie.

How to Learn This

  • 1Implement session-based login using `express-session`.
  • 2Store sessions in Redis instead of memory so they survive server restarts.
  • 3Compare session-based auth to token-based (JWT) auth and their different scaling trade-offs.

Previous

API Documentation Site

Next

JWT

More topics in Authentication & Authorization

JWTOAuth 2.0Passport.jsPassword Hashing (bcrypt)Role-Based Access Control (RBAC)Refresh TokensSocial Login (Google/GitHub)API KeysMulti-Factor AuthenticationSingle Sign-On (SSO)
InsideEdge

Stuck on this topic? Ask an Insider

Get 1:1 guidance from people who've walked this exact path — free on the InsideEdge app.

Download
InsideEdge