Managing User Sessions

At this point, our app is manipulating data in a proper database through the clicking of buttons on the view. However, anyone who comes across our app can also edit the data. While our app is not the type of app that would require a lot of security, it is an important concept to understand and practice in general web development.

In this chapter, we will build a system that creates users. This system will also manage user sessions by requiring the user to log in before they can alter any to-do items through the frontend app.

In this chapter, we will cover the following topics:

• Creating user data models with relationships with other tables with unique constraints of certain fields via database migrations
• Authenticating our users
• Managing user sessions
• Cleaning up authentication requirements
• Configuring expiration of auth tokens
• Adding authentication into our frontend

After reading this chapter, you will be able to understand...