change to use session for auth

+ replace BearerAuth to cookieAuth in swagger
+ add swagger.yaml to nodemon watch list

server/src/auth/jwtStrategy.js

@@ -1,13 +0,0 @@
-import { Strategy as JwtStrategy, ExtractJwt } from 'passport-jwt'
-import config from '../config.js'
-
-const jwtOptions = {
-  jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
-  secretOrKey: config.jwtSecret,
-}
-
-function verifyJwt(jwtPayload, done) {
-  return done(null, jwtPayload)
-}
-
-export default new JwtStrategy(jwtOptions, verifyJwt)

server/src/auth/passport.js

@@ -1,6 +1,20 @@
 import passport from 'passport'
 import PasswordStrategy from './passwordStrategy.js'
-import JwtStrategy from './jwtStrategy.js'
 
 passport.use(PasswordStrategy)
-passport.use(JwtStrategy)
+
+passport.serializeUser((user, done) => {
+  process.nextTick(() => {
+    done(null, {
+      _id: user._id,
+      username: user.username,
+      email: user.email,
+    })
+  })
+})
+
+passport.deserializeUser((user, done) => {
+  process.nextTick(() => {
+    done(null, user)
+  })
+})