JWT Token Management & Security

[levelslip]

• Description: Implement JWT token generation, validation, and password security
• Activities:
  • Design JWT token structure (access token: 15min, refresh token: 7 days)
  • Create JWT utility service (signToken, verifyToken)
  • Setup token blacklist using Redis for secure logout
  • Implement password security using bcrypt (hash and compare methods)
  • Create token refresh logic to issue new access tokens safely
  • Write unit tests for auth utilities
• Deliverables: JWT utility service, Redis integration for blacklist, password hashing utility