Introduction to the newline guide to building and deploying a REST API using Deno.

Welcome to Build and Deploy a REST API with Deno!

In this lesson, we will install Deno and create our setup for the rest of the course.

How to Install Deno Locally and in Docker Containers

Introduction

Deno vs Node: A Deno Fresh Start to JavaScript Runtimes

We will look at the command line interface for running Deno

How to Use the Deno REPL Command Line Interface

In this lesson, we will look at general usage of Deno by running a file and also introduce the config file

Executing TypeScript Files With Deno With the Config File

Learn how to use the Deno standard library and other external modules with URL imports

Deno vs Golang's Standard Library

How to Start a Deno Server and Set Permissions

You will learn how to make a simple token authentication in Deno

How to Build a Token Authentication Server With Deno

Getting Started with Deno

Using Databases with Deno

How to Use PostgreSQL in Docker with Deno

How to Integrate MySQL or MariaDB With Deno

How to Add SQLite to Deno with deno-sqlite

Connect to a database

Introduction to database migrations - what, why and how

What is Database Migration? The Strategy to Migrate Data

Get started with database migrations using Nessie

How to Add Nessie to Deno to Migrate Databases

We will go through creating a migration using the Nessie CLI

How to Create a New Database Migration With Deno Nessie

We will look at how to write a migration script where we create a table

Edit a Deno Nessie Database Migration to Catch Errors

We will run our migration and learn how to roll back the migration

How to Run and Roll Back a Database Migration With Deno Nessie

We will create a seed file using the Nessie CLI

How to Create a Database Seed File With Deno Nessie

We will run our seed file and populate our database

How to Import JSON Data and Seed a Database With Deno Nessie

Database migrations

Introduction to the concept of REST APIs and why we use them

REST API Introduction

We will go through the thought process of planning an application.

Best Practices for a REST API: Endpoints and Database Schema

We will create the initial project files and set up our environment

How to Prepare Deno to Build a REST API

We will create the router and look at how to test our endpoints

How to Build REST API Endpoints in Deno

It's time to add Nessie! We will now initialize Nessie in our project and also spin up our development database

Integrate a PostgreSQL Database With Nessie Into a Deno API

Time to connect our models to our database!

Building a MySQL or PostgreSQL Database Pool in Deno

In this step, we will create our first data model and create a corresponding table using a migration

Migrating Data to PostgreSQL and Modeling Data in Deno

Creating the methods to access the database

Build API Calls That Generate SQL Queries in Deno

Creating the server endpoints for the Duck namespace

Create a Database Controller in Deno

We will look at how to set up authentication and further authorize the requests

How to Authenticate and Authorize REST API Requests in Deno

We will create two new tables using a migration and create the equivalent models

Create New Tables and Models With Deno Database Migration

We will create our Quack service and controller

Add List, Create, Read, Update, and Delete Requests in Deno

The last stretch! We will create our final namespace, Crumb, and connect it to our other models and our router

How to Build Many-to-Many Namespace Connections in Deno

Now that our application is completed, we will consider some improvements and discuss alternative approaches.

API Afterthoughts

REST API

We will introduce deployments and what we will learn in this module

Deployment Introduction

We will create a Docker image for our application

How to Create a Docker Image to Containerize an Application

You will learn how to create a basic CI file for GitHub and GitLab, and run tests on them

How to Create Continuous Integration Files for GitHub and GitLab

We will deploy our application to a server using CI, SSH and git.

How to Deploy a Deno API Server With the Digital Ocean API

We will deploy our application to Digital Ocean Apps. This is by far the easiest (but most costly) approach.

How to Deploy a Deno Docker Image to Digital Ocean

Similar to how we did it in lesson 1, we will be deploying using CI and SSH, but instead of git, we will be using Docker.

Deploy with Docker

Deployment

In this course, we will learn how to work with [Deno](https://deno.land) to create a REST API using TypeScript with the web framework [Oak](https://github.com/oakserver/oak) and the migration tool [Nessie](https://github.com/halvardssm/deno-nessie). 
Deno is a JavaScript runtime created by [Ryan Dahl](https://tinyclouds.org), the same creator for Node, as an attempt to simplify the JavaScript landscape by strictly following the WebAPI specs. 
If you are interested in learning more about the motivation behind Deno, you can watch this video where Ryan Dahl explains "[10 Things I Regret About Node.js](https://www.youtube.com/watch?v=M3BM9TB-8yA)"

We will explore how to create an application using the powers of TypeScript, and learn how to traverse the Deno ecosystem which is much like the native web ecosystem. 
There are 5 modules that will take you from installing Deno and running your first lines of code, to working with web frameworks and databases, and in the end, deploying your application to a web server using a deployment pipeline.

Throughout this course, you will experience all the different aspects of Deno which you will need to create your own application in the future. 
And from this course, you will get a good feeling for if Deno is ready to be your next default for new projects.

In this course, we will learn how to create and deploy a REST API with Deno from scratch.

Build and deploy a REST API with Deno

Integrating databases into your application

Importance of database migrations in production applications

Deploying Deno applications to production using CICD

Although these two words sounds similar, they have quite disctinct functions.
Authentication is the term used to verify the identity of a user, while
authorization allows the verified identity access to the resources.

For authentication, we will be using the 

In the previous lesson, we decided to hash the password with the

 algorithm. Although this has been
the defacto standard for password hashing since the early 2000s, there are more
modern and secure hash algoritms used today with newer applications. In 2015 a
new hash algorithm was created named

 which is supposedly more secure,
and it is generally recommended to use this algorithm when creating new
applications.

For Deno, there are modules for multiple hashing algorithms, amongst

. Initially we were
going to use Argon2, but due to a lack of standardisation for password hashing
for Deno, we will opt for Bcrypt as it is more stable.

Let's look at the login endpoint, so that we can authenticate a user against a
Duck. In this course, we will be using

, which we will fetch once
during the login request, to then pass along in the header for all authenticated
endpoints.

export async function getByUsername(
  ctx: AppRouterContext,
  username: Duck["username"],
): Promise<Duck | null> {
  const client = await getClient(ctx);

  const result = await client.queryObject<Duck>({
    text:
      `SELECT * FROM ${DuckKeys.TableName} WHERE ${DuckKeys.ColUsername} = $1 LIMIT 1`,
    args: [username],
  });

  client.release();

  if (result.rows?.[0]?.username !== username) {
    return null;
  }

  return result.rows[0] as Duck;
}

With this method, we can now get a Duck via its 

export async function verifyLogin(
  ctx: AppRouterContext,
  data: Partial<Duck>,
): Promise<Duck> {
  if (!data.username) {
    throw new httpErrors.BadRequest("Username is missing from data");
  }
  if (!data.password) {
    throw new httpErrors.BadRequest("Password is missing from data");
  }

  const duck = await getByUsername(ctx, data.username);

  if (!duck) {
    throw new httpErrors.NotFound("Duck not found");
  }

  const isValid = await verifyPassword(data.password, duck.password);

  if (!isValid) {
    throw new httpErrors.Unauthorized();
  }

  return duck;
}

 method, we continue using the newly created

 method before verifying the password with 

. If the login
credentials are valid, we accept the login and return the record to be used in
the consumer.

 to quote the module.
This module helps us with the creation and validation of JWTs, but it also
includes a lot of other JSON goodies if you need that.

export interface AppJwtPayload extends JWTPayload {
  did: string;
}
export interface AppJwtResult extends JWTVerifyResult {
  payload: AppJwtPayload;
}

 (duck ID) property to our default JWT object, and
allow us to indicate which user is making the request.

Before we get into the nitty gritty of authorization and login, we need to add
two helpers in the 

export const jwtKey = await crypto.subtle.generateKey(
  { name: "HMAC", hash: "SHA-512" },
  true,
  ["sign", "verify"],
);

---
title: How to Authenticate and Authorize REST API Requests in Deno
description: We will look at how to set up authentication and further authorize the requests
code: https://gitlab.com/fullstackio/books/newline-course-apps/halvard-morstad-build-and-deploy-a-rest-api-with-deno-app/-/tree/main/app_with_sqlite_db%20(updated)/module_4.9?ref_type=heads
---

## Authentication and Authorization

Although these two words sounds similar, they have quite disctinct functions.
Authentication is the term used to verify the identity of a user, while
authorization allows the verified identity access to the resources.

### Authentication

For authentication, we will be using the `/login` endpoint we defined earlier.

#### Hashing algorithms

In the previous lesson, we decided to hash the password with the
[Bcrypt](https://en.wikipedia.org/wiki/Bcrypt) algorithm. Although this has been
the defacto standard for password hashing since the early 2000s, there are more
modern and secure hash algoritms used today with newer applications. In 2015 a
new hash algorithm was created named
[Argon2](https://en.wikipedia.org/wiki/Argon2) which is supposedly more secure,
and it is generally recommended to use this algorithm when creating new
applications.

> For Deno, there are modules for multiple hashing algorithms, amongst
> [bcrypt](https://github.com/jamesbroadberry/deno-bcrypt). Initially we were
> going to use Argon2, but due to a lack of standardisation for password hashing
> for Deno, we will opt for Bcrypt as it is more stable.

#### The login endpoint

Let's look at the login endpoint, so that we can authenticate a user against a
Duck. In this course, we will be using
[JWTs](https://en.wikipedia.org/wiki/JSON_Web_Token), which we will fetch once
during the login request, to then pass along in the header for all authenticated
endpoints.

Start by creating a `getByUsername` method for our `src/duck/service.ts`.

```typescript { actualFilename=../../code/module_4.9/src/duck/service.ts endLine=124 startLine=105 statedFilename=src/duck/service.ts url=https&#x3A;//gitlab.com/fullstackio/books/build-a-rest-api-with-deno-and-postgresql/module_05/lesson_09/.../code/module_4.9/src/duck/service.ts#L105 }
export async function getByUsername(
  ctx: AppRouterContext,
  username: Duck["username"],
): Promise<Duck | null> {
  const client = await getClient(ctx);

  const result = await client.queryObject<Duck>({
    text:
      `SELECT * FROM ${DuckKeys.TableName} WHERE ${DuckKeys.ColUsername} = $1 LIMIT 1`,
    args: [username],
  });

  client.release();

  if (result.rows?.[0]?.username !== username) {
    return null;
  }

  return result.rows[0] as Duck;
}
```

With this method, we can now get a Duck via its `username` instead of its `id`,
which will help us when logging in.

Now we can add a `verifyLogin` method:

```typescript { actualFilename=../../code/module_4.9/src/duck/service.ts endLine=150 startLine=126 statedFilename=src/duck/service.ts url=https&#x3A;//gitlab.com/fullstackio/books/build-a-rest-api-with-deno-and-postgresql/module_05/lesson_09/.../code/module_4.9/src/duck/service.ts#L126 }
export async function verifyLogin(
  ctx: AppRouterContext,
  data: Partial<Duck>,
): Promise<Duck> {
  if (!data.username) {
    throw new httpErrors.BadRequest("Username is missing from data");
  }
  if (!data.password) {
    throw new httpErrors.BadRequest("Password is missing from data");
  }

  const duck = await getByUsername(ctx, data.username);

  if (!duck) {
    throw new httpErrors.NotFound("Duck not found");
  }

  const isValid = await verifyPassword(data.password, duck.password);

  if (!isValid) {
    throw new httpErrors.Unauthorized();
  }

  return duck;
}
```

With a similar start as the `create` method, we continue using the newly created
`getByUsername` method before verifying the password with `bcrypt`. If the login
credentials are valid, we accept the login and return the record to be used in
the consumer.

Time to add a dependency again!

```typescript { actualFilename=../../code/module_4.9/import_map.json endLine=33 startLine=29 statedFilename=import_map.json url=https&#x3A;//gitlab.com/fullstackio/books/build-a-rest-api-with-deno-and-postgresql/module_05/lesson_09/.../code/module_4.9/import_map.json#L29 }

```

We now added `jose`, the Deno `JSON Web Almost Everything` to quote the module.
This module helps us with the creation and validation of JWTs, but it also
includes a lot of other JSON goodies if you need that.

Now we have to create a new type in our `main.ts` amongst our other helper
types.

```typescript { actualFilename=../../code/module_4.9/main.ts endLine=38 startLine=33 statedFilename=main.ts url=https&#x3A;//gitlab.com/fullstackio/books/build-a-rest-api-with-deno-and-postgresql/module_05/lesson_09/.../code/module_4.9/main.ts#L33 }
export interface AppJwtPayload extends JWTPayload {
  did: string;
}
export interface AppJwtResult extends JWTVerifyResult {
  payload: AppJwtPayload;
}
```

This will add a custom `did` (duck ID) property to our default JWT object, and
allow us to indicate which user is making the request.

Before we get into the nitty gritty of authorization and login, we need to add
two helpers in the `src/utils.ts`.

```typescript { actualFilename=../../code/module_4.9/src/utils.ts endLine=71 startLine=67 statedFilename=src/utils.ts url=https&#x3A;//gitlab.com/fullstackio/books/build-a-rest-api-with-deno-and-postgresql/module_05/lesson_09/.../code/module_4.9/src/utils.ts#L67 }
export const jwtKey = await crypto.subtle.generateKey(
  { name: "HMAC", hash: "SHA-512" },
  true,
  ["sign", "verify"],
);
```