Site Authentication in Node.js: User Signup and Login

This tutorial demonstrates building a user registration and login system in a Node.js web application. We'll cover input validation and password hashing for enhanced security.

Application Setup

Begin by creating a project directory (e.g., "site-auth"). Initialize npm within this directory:

npm init -y

Password validation uses a regular expression /^[a-zA-Z0-9]{6,30}$/, enforcing 6-30 characters consisting of alphanumeric characters.

The registration form's data is accessible via result. Validation errors result in an error message and redirection to the registration page. Duplicate email addresses are also prevented. Crucially, passwords are hashed using bcrypt before database storage:

result.value.password = hash

Successful registration displays a success message and redirects to the login page. Start the server with:

node app.js

Access the registration page at https://localhost:5000.

Sign-In Implementation

The login functionality is added to /routes/users.js. A login validation schema is defined using Joi:

const loginSchema = Joi.object().keys({
  email: Joi.string().email().required(),
  password: Joi.string().regex(/^[a-zA-Z0-9]{6,30}$/).required()
});

The login route handles both GET (rendering the login page) and POST (processing login attempts) requests:

router.route('/login')
  .get((req, res) => {
    res.render('login')
  })
  .post(async (req, res, next) => {
    // ... (login validation and password comparison logic) ...
  });

Successful login redirects to a dashboard.

Dashboard Implementation

A simple dashboard route is added to /routes/index.js:

router.get('/users/dashboard', (req, res) => {
    res.render('dashboard')
});

Conclusion

This tutorial provides a foundation for secure user authentication in Node.js applications. Remember to always validate user input and securely hash passwords. The complete source code is available on GitHub. This tutorial was updated with contributions from Mary Okosun, a software developer based in Lagos, Nigeria.

The above is the detailed content of Site Authentication in Node.js: User Signup and Login. For more information, please follow other related articles on the PHP Chinese website!