I used to passportJs but I will not satisfied by the resfresh mechanic and the security part. After I read your article (part 1 and 2), I deciced to use SuperTokens + Passportjs