Repository navigation
Authentication system #339
Description
Currently, the express-locallibrary application has no user authentication or session management. This means:
- Anyone can view the library catalog (intended), but anyone can also create, modify, or delete books, and book instances without identification (unintended).
- Users cannot sign up or sign in; there is no concept of a "current user" in the application.
Activity
hamishwillee commentedon Nov 20, 2025
Correct. This would be a nice enhancement. We would accept a PR that added such a system here AND documented it in MDN.
The model to follow would be like the Django tutorial - https://developer.mozilla.org/en-US/docs/Learn_web_development/Extensions/Server-side/Django/Sessions and https://developer.mozilla.org/en-US/docs/Learn_web_development/Extensions/Server-side/Django/Authentication
The libraries used for this would need to be popular and well maintained.
The effort is significant, so it won't happen without volunteer work.
nejidevelops commentedon Oct 28, 2026
Can I work on this issue? @mdn/community
hamishwillee commentedon Oct 29, 2026
@nejidevelops Of course. BUT there is an unreviewed update to the docs:
So your proposal should build on those.
The way assignment works is that you start work and submit a PR that cross links to the associated issue. The presence of the cross link is what tells users that someone is working on the issue.