When logging in a user via website, should I do it server side or client side?

[farhan-syed]

Hello currently I have this as a POST method on my backend:

app.post('/login', (req, res) => {

  login();

function login() {
    Parse.User.logIn("username", "test", {
        success: function(user) {
            // Do stuff after successful login, like a redirect.
            console.log('User logged in successful with username: ' + user.get("username") + ' and email: ' + user.get("email"));
            console.log(user.sessionToken)

        },
        error: function(user, error) {
            console.log("The login failed with error: " + error.code + " " + error.message);
        }
    });
}
  
  res.status(200).send("logging in");

});

Is this the right approach? Also if it is, how would I go about setting a current user? Do I just do that client side?

Would appreciate the direction, thanks in advance!

[flovilmart]

You should log your users client side and pass the session token for authenticated calls. Not sure why you would want to do it server side. Also this is not a forum. Your question would fit better on stackoverflow

[farhan-syed]

I see so what your saying is that Parse.User.logIn() function should be dealt with on the client side. Then once logged in. Say I need to save something for the user or grab data, that should be done on the client side as well? or on the server side but just pass the session token? I thought that dealing with saving/grabbing data would be unsafe on the client side.

And sorry about asking on here. I just thought I'd get an answer faster since everyone here knows about Parse.

[flovilmart]

Well, this depends on your use case. Risking repeating myself, there is stackoverflow.

[farhan-syed]

alrighty.