End-to-End Security with Auth0
Buy now
Learn more
Getting Started
Tour the Application
Sign Up for MongoDB Atlas
Clone the Repo and Install Dependencies
Run the React App and Express API
Checkout the Start Branch
JSON Web Tokens
Anatomy of a JSON Web Token
Sign a JSON Web Token
JSON Web Token Dos and Don'ts
Signup and Login
View the Signup and Login Endpoints
Complete the User Signup Form
Complete the User Login Form
Handing Auth State
Set Auth State after Login
Use Auth State in UI Elements
Persist Auth State on Page Refresh
Check if the User is Currently Authen...
Navigate Conditionally Based on Auth ...
Add Logout Functionality
Check the User's Role
Conditionally Display Sidebar Items
Handling Client-Side Routing
Guard Client Side Routes Based on Aut...
Guard Client Side Routes Based on Role
Handling Authenticated HTTP Requests
Add a JWT to an Axios Request
Add an HTTP Interceptor to Axios
Protecting API Endpoints
Add a JWT Verification Middleware
Attach a User to the Request Object
Limit Access to Admin Users
Get the User ID from Requests
Hardening the Application
Use Lazy Loading to Limit Access to Code
Maintain an Allowed Origin List for T...
Sanitize Content when Setting InnerHTML
Carry Out a Cross-Site Scripting Attack
Steal a JSON Web Token
Sanitize a Cross-Site Scripting Attack
Switching to Auth0
03-third-party-auth.zip
Run the App and API
Why Use a Third-Party Auth Provider?
Sign Up for an Auth0 Account
Configure Application URLs
Create a User in Auth0
Set Up an API and Permissions
Add User Roles in Auth0
Use the Universal Login Screen
Install the Auth0-React SDK
Redirect Users to Auth0 to Log In
Use isLoading to Wait for Authentication
Use isAuthenticated to Check Auth Status
Get an Access Token from Auth0
Use a JWKS Verification Middleware
Augment the User's Profile with a Rule
Use the Auth0 Role in the React App
Request Scopes for an Access Token
Apply Scope Check Middleware to Endpo...
Add a Custom User ID with an Auth0 Rule
Allow Users to Log Out
Display the User's Name and Picture
Remove AuthContext, Login, and Signup
Renew Access Tokens
Products
Course
Section
Hardening the Application
Hardening the Application
End-to-End Security with Auth0
Buy now
Learn more
Getting Started
Tour the Application
Sign Up for MongoDB Atlas
Clone the Repo and Install Dependencies
Run the React App and Express API
Checkout the Start Branch
JSON Web Tokens
Anatomy of a JSON Web Token
Sign a JSON Web Token
JSON Web Token Dos and Don'ts
Signup and Login
View the Signup and Login Endpoints
Complete the User Signup Form
Complete the User Login Form
Handing Auth State
Set Auth State after Login
Use Auth State in UI Elements
Persist Auth State on Page Refresh
Check if the User is Currently Authen...
Navigate Conditionally Based on Auth ...
Add Logout Functionality
Check the User's Role
Conditionally Display Sidebar Items
Handling Client-Side Routing
Guard Client Side Routes Based on Aut...
Guard Client Side Routes Based on Role
Handling Authenticated HTTP Requests
Add a JWT to an Axios Request
Add an HTTP Interceptor to Axios
Protecting API Endpoints
Add a JWT Verification Middleware
Attach a User to the Request Object
Limit Access to Admin Users
Get the User ID from Requests
Hardening the Application
Use Lazy Loading to Limit Access to Code
Maintain an Allowed Origin List for T...
Sanitize Content when Setting InnerHTML
Carry Out a Cross-Site Scripting Attack
Steal a JSON Web Token
Sanitize a Cross-Site Scripting Attack
Switching to Auth0
03-third-party-auth.zip
Run the App and API
Why Use a Third-Party Auth Provider?
Sign Up for an Auth0 Account
Configure Application URLs
Create a User in Auth0
Set Up an API and Permissions
Add User Roles in Auth0
Use the Universal Login Screen
Install the Auth0-React SDK
Redirect Users to Auth0 to Log In
Use isLoading to Wait for Authentication
Use isAuthenticated to Check Auth Status
Get an Access Token from Auth0
Use a JWKS Verification Middleware
Augment the User's Profile with a Rule
Use the Auth0 Role in the React App
Request Scopes for an Access Token
Apply Scope Check Middleware to Endpo...
Add a Custom User ID with an Auth0 Rule
Allow Users to Log Out
Display the User's Name and Picture
Remove AuthContext, Login, and Signup
Renew Access Tokens
6 Lessons
Use Lazy Loading to Limit Access to Code
Maintain an Allowed Origin List for T...
Sanitize Content when Setting InnerHTML
Carry Out a Cross-Site Scripting Attack
Steal a JSON Web Token
Sanitize a Cross-Site Scripting Attack