ACE + React (create-react-app)

authbeat is just periodic $http.get(’/authbeat’), with corresponding backend route:

  app.get('/authbeat', addon.checkValidToken(), function (req, res) {
    res.send();
  });

and updating auth header for subsequent requests.

In angular I do it like this:

    $provide.factory('authHttpInterceptor', ['$injector', '$q', function($injector, $q) {
        return {
            response: function(response) {
                var xAcpt = response.headers('X-acpt');
                if (xAcpt) {
                    window.atlToken = xAcpt;
                    // update authentication token
                    $httpProvider.defaults.headers.common['Authorization'] = "JWT " + window.atlToken;
                }
                return response;
            }
        }
    }]);