Authentication for the REST of us
summary
Progressively adds authentication to a barebones web app, showing concrete code that issues JWTs with HS256, signs them with the jsonwebtoken Node module, and returns tokens from a serverless endpoint using Netlify Functions. Demo generates tokens, demonstrates authorization bearer headers versus a serialized NF_JWT cookie, encodes roles and claims, and sets expirations. Demo works live and the code shows generateJWT, set-cookie, and fetch flows. Strong warning: do not roll your own auth and consider providers like Auth0 Okta or GoTrue.
AI-written summary · about
chapters (28)
- 0:00Intro
- 1:14Phyto Alliance
- 1:57About Divya
- 2:38Authentication Panic
- 3:04Why Authentication Matters
- 3:51Authorization
- 5:06Basic Authentication
- 6:35Multiple Authentication
- 7:20Session Based Off
- 8:50Token Based Off
- 9:54JSON Web Tokens
- 12:58Demo
- 14:51Workflow
- 16:00Servers
- 16:27Authentication Options
- 16:58Authentication Endpoint
- 17:21Authentication Main
- 17:53EventUpBody
- 18:27GetExpiry
- 18:52GenerateGWT
- 20:03Authorizations
- 21:08Cookie Library
- 22:04SetCookieHitter
- 23:05Image Optimization
- 23:54Redux Store
- 24:38Temp Login
- 25:04Confirmation
- 25:56Login
related talks
12mAuthentication and Authorization in Next.js
19mJWT! What is it good for? Absolutely everything!
20mAuthentication from Scratch
37mKnock knock, who's there? Authenticating your single page apps using JSON Web Tokens
47mDeconstructing and Evolving REST Security
22mKnock knock, who's there? Authenticating your single page apps using JSON Web Tokens
29mKnock knock, who's there? Authenticating your single page apps using JSON Web Token
40mKnock knock, who's there? Authenticating your single page apps using JSON Web Tokens