Beginning API Development with Node.js

Exercise 19: Securing All the Routes

In this exercise, we're going to secure all the /todo/* routes that we created so that no unauthenticated user can access them. In the Exercise 21: Implementing Authorization, we will differentiate between an unauthenticated and an unauthorized user:

1. We will first start by installing a Hapi.js plugin for JWT, hapi-auth-jwt. Go to the Terminal and run:

npm install hapi-auth-jwt --save

Use the Code/Lesson-3/exercise-b for your reference.

2. We will modify the routes array that we get from ./routes/todo.js in the server.js file:
   1. First, begin by requiring the installed hapi-auth-jwt at the top of the file:

const hapiAuthJwt = require('hapi-auth-jwt');

1. 2. Then, replace the old line, server.route(routes.todo ...