Rust Web Programming - Third Edition

10

Managing User Sessions

We now have our to-do server working with a React frontend and Postgres database. However, there is no authentication. Anybody can access the application and alter the to-do list. As we know, the internet does not work like this, as websites authenticate their users before allowing them to perform operations. We must authenticate our users before we can allow them to alter to-do items. In this chapter, we are going to build an authentication server and integrate it into our system so we can authenticate our users before allowing them to access the to-do items. In this chapter, we will cover the following:

• Building our auth server
• Defining our user data model
• Storing passwords
• Verifying passwords
• Creating users
• Refactoring ...