Nodejs Do I need to use Passport

Question

Alright, so I'm currently coding a Web Application with Node.js, and I'm a bit stuck on how I should handle user logins/authentication.

Lots of tutorials seem to recommend using Passport for your authentication, but from all the documentation I've read, it seems to take a bit of setting up and it complicates the simple login I was expecting.

Whether or not I use Passport, I still plan on hashing my user passwords that are stored in the Mongo database.

So the question is, do I need to use Passport for security reasons, or can I just code an authentication system my self?

Answer 1

It's really up to you, if you don't need Facebook, Google, or Twitter logins or are fine coding your own, I would just build it from scratch.

I built an application for a company that didn't need all the bells and whistles that Passport came with, but needed it's own security built in, and found it much easier to just make my own. It's so easy to include your security as middleware in node!

Answer 2

I think it depends your use.Generally set a password is necessary, and use passport is not complicated in Nodejs .Of course ,if your application is used in internal，password can be ignored.But I think security is provided.