We recently rebuilt our authentication system from scratch. This post documents our approach and lessons learned. Requirements Session-based auth for web app JWT tokens for API access Support for 2FA (future) Session timeout: 30 minutes Implementation We use Express sessions with Redis as the session store: const session = require(‘express-session’); const RedisStore = require(‘connect-redis’)(session); const… Continue reading Building Our Authentication System – Dev Notes