Registration and authorization?

Question

MongoDB

Kind) I do not fully understand the processes of user authorization and session tracking. To whom it is not difficult to explain with an elementary example. Let's say you need to make a site where you can only register and be under your own name. If the user is not authorized, send to the registration/authorization page.
And so, registration takes place in a classic way, name and password - a new user is sent to the database (in my case, mongoDb) 1st stupid question, save the password in mongoDB?)
After registration, authorization should be possible. And here's where I don't know how to do it. Sessions, cookies... I've seen dalali with the express-session module. Tell me in simple terms how to do it? What is the first thing to understand? Thanks

Answer 1

for example, after successful authorization, store information in localStorage in order to know that the user is still authorized, and after log out, delete information from localStorage.

Answer 2

what do you write back-end on? on node or php, you can just write in php for example Silex or Lumen, Express js

Answer 3

https://scotch.io/tutorials/authenticate-a-node-js...
This link describes the process very well. NodeJS + MongoDB (ORM mongoose)
Access-token on the client can be stored in localStorage. By access-token on the backend, you can find out which user is making the request. In general, everything is well written there.