Quick & easy development You can construct REST API with Node. ... Node. js has large and active community that contribute many useful and mature modules which can be easily included and used. For example, to construct REST API such known modules as express, restify and hapi fit perfectly. REST stands for REpresentational State Transfer. REST is web standards based architecture and uses HTTP Protocol. It revolves around resource where every component is a resource and a resource is accessed by a common interface using HTTP standard methods. REST was first introduced by Roy Fielding in 2000 Getting started Create a Folder name todoListApi - mkdir todoListApi. Navigate to the root of your newly created folder - cd todoListApi. Create a package.json file - npm init. ... Create a file called server. ... Create a folder called api - mkdir api. express-restify-mongoose. TypeScript icon, indicating that this package has built-in type declarations. JSON Web Token JSON Web Token (JWT) is a means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS) and/or encrypted using JSON Web Encryption JSON Web Token (JWT, sometimes pronounced /dʒɒt/, the same as the English word "jot") is an Internet standard for creating data with optional signature and/or optional encryption whose payload holds JSON that asserts some number of claims. The tokens are signed either using a private secret or a public/private key. Learn the basics of JWT and how to use them It works this way: the server generates a token that certifies the user identity, and sends it to the client. The client will send the token back to the server for every subsequent request, so the server knows the request comes from a particular identity. The OAuth token is a security token granted by IDP that can then be validated only by that same OAuth token provider. An opaque token is not the only kind of OAuth token. The opaque token is one kind of token; JWT can be used as another kind of OAuth token that is self-contained. JWT, in contrast, are not opaque.