What authorization mechanism to choose for an RPC framework developed on js?

Question

JavaScript

There is a node-TeleportServer
server And there is a web-TeleportClient
client Communication between the client and the server is built on the use of websocket,
native on the client, einaros/ws
library on the server Now there is no authorization. Any client knowing the address of the server can connect to it and call any methods of the server . A belated understanding has come that it is not good to do this. But I have no ideas to do the authorization correctly. Perhaps there are best practices for authorization on the server, about which I know nothing about due to my youth. I would be glad if someone prompted in which direction to dig.

Answer 1

For example, you can use passportjs .