I usually make websites using Javascript (JQuery) client side, and use PHP + MySQL server side for user authentication, online ordering system etc.
I have been learning node/express, socket.io, mongoDB/mongoose and passport for a few months and is thinking of using them in production to replace the PHP + MySQL server side and allow my website to be more real-time/interactive. Users of my site are tech savvy and so browser compatibility is not an issue.
Is Passport the only production level local authentication system for node/express? (usernames/passwords stored locally on my server via mongoDB)
The only other local authentication node module I have come accross is called lockit. I personally have not used it but it seems like it has much less overhead than passport. Then again, Passport is extremely customizable and powerful.