Objectives

• Review client-server architecture for Rails + React

• Review creating a Rails API for a React app

• Strategies for securing an API

• WTH is JWT

  • Encoding vs. encryption BREAK
  • .env and dotenv and .gitignore

• How to use JWT to secure an API

  • Review: Authentication vs. Authorization

LATER TODAY

• The front end