ESI and authorizations

I’m trying building myself a React App. Currently there’s no server side stuff like Express or a DB on my agenda.

My goal is to use ESI. API calls without authorizations are no problem. However I’m struggling with stuff like asking for the current orders of a character.

I’m looking for a general guidance from Javascript/webdevs how I could tackle authorization.

Some questions:

  • Do I need a database for the authentication?
  • Would passport.js make my life easier?
  • Is there any guide that could help me?

Thanks in advance.