Find the user from the database based on their email and encrypt their password. If the user logs in successfully, generate a JSON Web Token (JWT) and include it in the response. This is a key step in stateless authentication, a software engineering principle that improves scalability and security. In the previous lesson, the generation and inclusion of the JWT in the response were omitted, which left the authentication process incomplete.

"dependencies" : {
  "@nestjs/jwt": "^10.0.3",
  "passport-jwt": "^4.0.1",
},
"devDependencies": {
  "@types/passport-jwt": "^3.0.8",
}

We have to install these packages to implement complete JSON Web Token authentication and Authorization

// auth.module.ts
import { JwtModule } from '@nestjs/jwt';

imports: [UsersModule, JwtModule.register({ secret: 'HAD_12X#@' })],
controllers: [AuthController],
providers: [AuthService],
exports: [AuthService],

You need to register the JwtModule module in the AuthModule by providing the unique secret key. We will use this secret key to decode the token or validate the token

// auth.service.ts


export class AuthService{
constructor(
  private userService: UsersService,
  private jwtService: JwtService, // 1
) {}


async login(loginDTO: LoginDTO): Promise<{ accessToken: string }> { // 1.


/// ...
if (passwordMatched) {
  delete user.password;
  return user;
  // Sends JWT Token back in the response
  const payload = { email: user.email, sub: user.id };


  return {
    accessToken: this.jwtService.sign(payload),
  };
}

Create a new file to save Constant Values

You have to create a new file inside the auth folder.

// auth.constants.ts
export const authConstants = {
  secret: "HAD_12X#@",
};

---
title: Authenticate User with Passport JWT
privateVideoUrl: https://fullstack.wistia.com/medias/dfkjf2rsta
isPublicLesson: true
---

Find the user from the database based on their email and encrypt their password. If the user logs in successfully, generate a JSON Web Token (JWT) and include it in the response. This is a key step in stateless authentication, a software engineering principle that improves scalability and security. In the previous lesson, the generation and inclusion of the JWT in the response were omitted, which left the authentication process incomplete.

Let's create the JSON web token:

### Install Dependencies

```json
"dependencies" : {
  "@nestjs/jwt": "^10.0.3",
  "passport-jwt": "^4.0.1",
},
"devDependencies": {
  "@types/passport-jwt": "^3.0.8",
}
```

We have to install these packages to implement complete JSON Web Token authentication and Authorization

### Import JWT Module in AuthModule

```ts
// auth.module.ts
import { JwtModule } from '@nestjs/jwt';

imports: [UsersModule, JwtModule.register({ secret: 'HAD_12X#@' })],
controllers: [AuthController],
providers: [AuthService],
exports: [AuthService],
```

You need to register the JwtModule module in the AuthModule by providing the unique secret key. We will use this secret key to decode the token or validate the token

### Refactor the AuthService

```ts
// auth.service.ts


export class AuthService{
constructor(
  private userService: UsersService,
  private jwtService: JwtService, // 1
) {}


async login(loginDTO: LoginDTO): Promise<{ accessToken: string }> { // 1.


/// ...
if (passwordMatched) {
  delete user.password;
  return user;
  // Sends JWT Token back in the response
  const payload = { email: user.email, sub: user.id };


  return {
    accessToken: this.jwtService.sign(payload),
  };
}
```

1.  Inject JwtService as a dependency.
2.  If the password matches, generate the JWT token using the `jwtService.sign` method.
3.  Provide the payload, which should include the user email and userId inside the JWT token. Choose a name for the user ID field; 'sub' is used here but any name can be applied.

Haider Malik

Authenticate User with Passport JWT

We have found the user on the page on email and we have encrypted the user

If user has logged in successfully, we need to send the JSON web token.

And when you will apply authentication on protected route, you have to send the

We're going to use NestJS JWT package and passport JWT package.

You have learned how to create the login function and you have to refactor it

You can create JSON web token by using JWT service.

This is the provider you can inject it here as a service provider.

Then I will move my constants into a separate file, auth.constants.es.

And you have to register the JWT module and update auth constant secrets.

I also updated the expiry date of JSON web token.

We are extending it from the passport strategy.

Remember, I'm using the NestJS passport package and we have passport JWT

Here it is just extracting the token from the header.

We are checking the JSON web token expiry date or expiry validation or expiry

Here you have to provide your secret key which we have saved.

And then finally we're going to have a validate method.

It is returning the user ID and the email.

When you apply the auth guard, auth guard, JWT auth guard will call this

You have to register the JWT as a provider.

Then this is how you will implement authentication.

If you want to implement role based authentication, you need guards.

It is extending auth guard from the passport.

If you want to add your own custom logic, you can do it here.

This is how you will make your route protected by using the JWT auth guard.

And finally you have to send the authentication request.

Login route will give you the JSON web token.

Then you can access your protected route.

Only authenticated user can access this profile route.

You have to provide the validation token, which is this one, JSON web token.

In the authorization barrier it's a scheme.

First of all we have to install a couple of dependencies.

I also need def dependency, which is typing of TypeScript.

Then we have to install the dependencies.

We will move the constant into separate file, but right now I'm going to do it

JWT module.register and this is the secret key.

And finally we have to refactor our auth service.

If everything is fine, then we can use auth or JWT service.

If password matched, generate a JSON web token or create a payload object.

Now we are just adding email and the user ID inside the payload and it is

Let's create a separate file for the constants.

One more thing, you got to register the JWT module in the auth module instead

Now we have to call super constructor and you can extract the header from auth

And we have to provide the ignore expiration.

Get the expirated secret which is our secret key and we will have the validate

Learn

The newline Guide to Building Your First GraphQL Server with Node and TypeScript

Teach

Amelia Wattenberger

Author of Fullstack D3

Community

Masterclasses

Tutorials

Fullstack React with TypeScript