Build HTTP APIs with routing, middleware, validation, controllers, and error handling.
Lessons
Issue and verify JSON Web Tokens for stateless auth.
JWT Authentication is easiest to learn by reading the example, changing it, and observing the result.
// npm install jsonwebtoken
import express from 'express';
import jwt from 'jsonwebtoken';
const app = express();
function auth(req, res, next) {
const token = req.headers.authorization?.split(' ')[1];
try {
req.user = jwt.verify(token, process.env.JWT_SECRET);
next();
} catch {
res.status(401).json({ message: 'Invalid token' });
}
}
app.get('/api/profile', auth, (req, res) => res.json({ user: req.user }));
app.listen(3000);Practice the JWT Authentication example in a small scratch file, then explain what changed and why.
In accordance with Section 6 & Section 7 of the DPDP Act 2023, third-party analytics and marketing trackers are strictly gated behind your affirmative consent. You may withdraw consent at any time under Section 6(4).
Essential for session authentication (ci_session), Cross-Site Request Forgery security (csrf_cookie_name), and Cloudflare DDoS/bot prevention. Cannot be disabled.
Gated under DPDP Section 7. Allows Google Analytics 4 (Google Consent Mode v2) to measure aggregate, anonymized tool usage.
Enables browser local storage to preserve your theme selection (dark/light mode) and code editor layout between visits.
Used to display developer sponsorships and native tool partner notices.