It uses Passport with custom LocalStrategy, JWT for authentication, and Passport-jwt for authorization and protection of routes.
- Comment ExtractJWT.fromUrlQueryParameter in authentication/auth.js
- And uncomment ExtractJWT.fromAuthHeaderAsBearerToken() in authentication/auth.js