Please enable JavaScript.

Coggle requires JavaScript to display documents.

Authentication, Authorisation, Roles & User Management in Express…

- - - - If the JWT is stored in local storage (on the client)
        On the client, create a /logout route that deletes
        the JWT from the client's local storage.
        This will log the user out.
      - If the JWT is stored in a cookie
        On the server, create a /logout route that clears
        the auth token cookie and sends that cleared
        cookie back to the client.
        This overwrites the client's current cookie,
        hence logging the user out.