How do I implement JWT authentication in a Node.js and Express app?

How do I implement JWT authentication in a Node.js and Express app?

To implement JWT authentication, first install the necessary packages: jsonwebtoken and express-jwt. Then, create a login route that generates a token upon successful authentication.

What should I include in the payload of the JWT?

Typically, you should include user ID and roles in the payload. This helps in identifying the user and managing permissions.

How do I protect my routes using JWT?

You can use middleware like express-jwt to protect your routes. It will check for a valid token in the request headers.

Can you show me an example of a protected route?

Sure! Here's a simple example:

app.get('/protected', expressJwt({ secret: 'your-secret-key' }), (req, res) => {
  res.send('This is a protected route!');
});