Implement Sessions

[sifatulrabbi]

When the user logs in, rather than sending the Jwt bearer token to the user, save the token to the session storage of the user's browser. And then, on every user request for protected routes, the Jwt bearer token will be attached to the request object for authentication. The Jwt bearer token will expire after one day, and then it will be removed automatically. If the user tries to log out before the expiration, the bearer token will be removed and destroyed in the process.