VueJS JWT Auth with Rails APIs and LocalStorage Discussion
Great video, Chris!
I'm really enjoying the whole API series and I'm excited to see more Vue!
Thanks Chris!
Lots more Vue coming, I really really enjoy using it on the frontend. It feels refreshing to work with for once.
Why not hook into the new non-jQuery rails UJS driver for the submit handling?
Primarily because if you're already using a frontend framework you'll want to keep all the Javascript contained within the component. If you use the JS responses from UJS requests, you're not splitting your JS across two things (the component code and the rails response) and it's no longer self contained. The component should be the one changing state to keep it organized.
You can still do that if you want to, I just wouldn't recommend it because you might as well just use UJS only and no frontend framework then.
Great idea to combine Rails Api + VueJs..
Can you give me an idea how to 'logout'?
Something like... localStorage.removeItem?
Thanks Chris
Logout is as simple as deleting the token from localStorage and the Vue state. Ideally, you'll want expirations on your tokens ideally so that they can be invalidated after a time. This is the same thing that Rails session cookies do for logout as well so it's nice and similar.
Are you planning to do any react front end sessions? I know you're tired of authentication, but I'd love to see you do some work in react so that I can get a feel for how to use it with rails in the back end. I'm getting a lot out of this series. Something is preventing me from commenting on episode 6, but I'd love to learn more about AMS too
spaquet
An other way to prevent default when clicking on the submit button is: <button v-on:click.prevent="submit" [...]="" this="" takes="" benefit="" from="" some="" of="" vue="" features="">
Ryan Maas
Definitely a little late for this, but how are routes handled? Vue (or Vuex) would handle them I suppose, right?
For example: I login, get redirected to a given page. I think that'd be Vuex, but I read that (for some reason) Rails should provide matching routes. I haven't found enough implementations on Rails APIs with Vue to be certain though.
All the routes are handled by Rails in these videos. Vue is just pointing to the Rails routes to submit things to the server.
Hello Chris. Isn't it a bad idea to store session tokens in localStorage, security-wise? They become vulnerable to XSS. Probably a secure cookie with httpOnly it's better.
https://medium.com/@yuliaoletskaya/can-jwt-be-used-for-sessions-4164d124fe23
Yeah, and I recommend using cookie auth for in-browser API authentication. You might as well take full advantage of the browser's security if you've got it.
If accessing an API from an embedded app (eg a react widget) you can't use cookies any more because browsers are blocking 3rd party cookies by default now. What do you recommend in those circumstances?
chris, I need your help about actioncable and redis.
I signedup here to talk with you.
I read your good post on actioncable.
I am sorry to bother you.
How can I send you my scripts to check out.
I hired one to make website.
But it does not load realtime data.
I think actioncable websocket is not working.
Can you help me ?
my email is frontnic@gmail.com.
thank you
