Use only passportJS as a layer for authenticating requests hitting REST APIs from a Native Android Mobile Application

[chinmayrane]

A standalone Native Android Application, implementing basic login functionality. When requests the user with the auth-tokens for Social Media Strategy, How should one go about this in passportJS?

Should the authentication be handled client side and authorization on the server side. In the sense, the android application will throw up a Facebook/Login Web View in a Modal Box (Say..) When he/she hits login from there, it will call the facebook APIs, when it comes back with a success or failure result, how should my passport react to it on the server end and why?