How to make a website with api?

Question

API

I am learning to make a website that works on the basis of api. The server on the node just manages uploading and receiving files, and the server from create-react-app on another port works with the functionality of the first one. There was a question about the authorization of the user ... The question is: "On which server should authorization be present, and am I moving in the right direction?". In this matter, I am a complete 0! I will be glad to all advice)

Answer 1

API authorization is easy. You go through authorization as on a regular site by sending a login + password and you get a token. You shove this token into all subsequent requests. No cookies, sessions.

Answer 2

You need to dig towards the JWT for the selected api framework. If this is express, then here is either https://www.npmjs.com/package/express-jwt
And it works according to the principle as
described by spaceatmoon