Getting Started
Prerequisites for the Course
Download the Code for the Course
Advanced React Security Patterns Code Download
18.1 MB
Sign Up for MongoDB Atlas
Install Global Dependencies
Take a Tour of the Orbit App
Refreshing JSON Web Tokens
User Experience Problems with JWTs
Add a Refresh Token Model
Save the Refresh Token in a Cookie
Add a Token Refresh Endpoint
Get a New Token in the Auth Debugger
Get a New Token on 401 Errors
Automatically Retry Post Requests
Add a Refresh Token Invalidation Endpoint
Add an Expiry Time to the Refresh Token
Switching to Cookies and Sessions
Install and Configure express-session
Set a Session on Login and Signup
Add a Session-Based Middleware
Add a Public Axios Instance
Create a User Info Endpoint
Check if the User is Authenticated
Refactor Login and Signup
Add a Persistent Session Store
Strengthen the Session Cookie
Third Party Authentication Providers
Why Use a Third-Party Auth Provider?
Sign Up for an Auth0 Account
Configure Application URLs
Set Up an API and Permissions
Use the Universal Login Screen
Install the Auth0-React SDK
Redirect Users to Auth0 to Log In
Use isLoading to Wait for Authentication
Use isAuthenticated to Check Auth Status
Get an Access Token from Auth0
Use a JWKS Verification Middleware
Augment the User's Profile with a Rule
Use the Auth0 Role in the React App
Request Scopes for an Access Token
Apply Scope Check Middleware to Endpoints
Add a Custom User ID with an Auth0 Rule
Display the User's Name and Picture
Remove AuthContext, Login, and Signup
Authentication and Authorization for GraphQL
Tour the GraphQL Implementation
Include a JWT in a GraphQL Request
Add the User to the GraphQL Context Object
Check Authorization in a Resolver
Add a Function to Check the User's Role
Define an Auth Schema Directive
Add a Custom Directive Class
Complete the Auth Directive Class
Apply the Auth Directive to the Schema
Redirect to the Login Page
Authentication and Authorization for GatsbyJS
Tour the Gatsby App Setup
Wrap the Root Element with Providers
Create Client-Side Routes
Make Login and Signup be Client-Side Routes
Check the Environment when Building the App
Authentication and Authorization for Next.js
Install Dependencies and Run the App
Tour the Next.js Project Code
Make Calls for Data on the Server Side
Add an Authorization Middleware
Add an Admin Authorization Middleware
Check for Authentication on the Client
Check for the Admin Role on the Client
Serverless Authentication
Set Up a Directory for Serverless Functions
Create a Basic Serverless Function
Configure a Proxy to Netlify
Get Data from a Serverless Function
Check Authorization in a Serverless Function
Connect to a Database from a Serverless Function
Query a Database from a Serverless Function
Challenge: Complete the Remaining Endpoints
