Secure node.js restful API
问题 I'd like to secure a restful Api, and I'm trying to keep it as simple as possible, as well as being stateless. What is the optimal way to store, generate, and authenticate api keys? I was thinking about generating keys with node-uuid, storing them in redis, and then authenticating them with passport-apikeys. Would this work? Or is there another optimal solution that I'm missing. I have been reading up on this a good amount, but a lot of resources are missing the actually implementation, like