Authorization without sessions?

Question

JavaScript

I'm looking for examples of authorization using restify + passport, I came across one project . I did not find the use of sessions in the project anywhere, you can even look at the dependencies:

"dependencies": {
    "bcrypt": "^1.0.2",
    "jsonwebtoken": "^7.3.0",
    "morgan": "^1.8.1",
    "passport": "^0.3.2",
    "passport-local": "^1.0.0",
    "pg": "^6.1.5",  // не используется
    "pg-hstore": "^2.3.2",  // не используется
    "restify": "^4.3.0",
    "sequelize": "^3.30.4",
    "sequelize-hierarchy": "^1.2.0",
    "uuid": "^3.0.1" // не используется
  }

Then a question - how then there is an authorization in such projects? How is the session stored? How does the server understand that the user is authorized if no sessions are used? thank you

Answer 1

link