Blockchain Development with Hyperledger

User and session management

Before performing a network (channel) or chaincode operation, a user must establish an authenticated session. We will implement the /login API function as follows:

1. Create a JWT token for a user with an expiration time of 60 seconds
2. Register or log the user in
3. If successful, return the token to the client

The server expects the name of a user and an organization name for registration or login to be provided as form data in the request body. An administrative user is simply identified by the admin username. The request body format is:

username=<username>&orgName=<orgname>[&password=<password>]

A password must be supplied, but only if the <username> is admin. In that case, the middleware will simply check whether ...