session-lock/example at main · erickirt/session-lock

Name	Name	Last commit message	Last commit date
parent directory ..
public	public
src	src
.eslintrc.json	.eslintrc.json
.gitignore	.gitignore
README.md	README.md
database.js	database.js
initDB.js	initDB.js
jsconfig.json	jsconfig.json
next.config.js	next.config.js
package.json	package.json
pnpm-lock.yaml	pnpm-lock.yaml
postcss.config.js	postcss.config.js
tailwind.config.js	tailwind.config.js

Name

Last commit message

Last commit date

This is a Next.js project that demonstrates how session-lock works and can be implemented. Specific files to note are:

/src/components/AuthForm.js - The login form component that generates a key pair and sends the public key to the server when an authentication request is made.
/src/pages/dashboard.js - The dashboard page that makes a protected resource request to the server. Also contains a logout button that, in addition to removing the JWT, clears the IndexedDB database.
/src/pages/api/login.js - A login API endpoint that embeds the public key into the JWT it returns to the client if the login request is otherwise valid (i.e., the username+password credential is correct).
/src/pages/api/protected.js - A protected resource API endpoint that verifies the JWT's signature and timestamp before returning the protected resource.

Running locally

npm run dev
# or
yarn dev
# or
pnpm dev

Open http://localhost:3000 with your browser to see the result.