NestJS Zero to Hero 11 — Authentication, JWT và Refresh Token Rotation
Xây password login an toàn, access JWT có issuer/audience, global Passport guard, refresh session rotation/reuse detection và logout/revoke có state.
Filter/Tag
#authentication
5 entries
-
-
Next.js 16 from Zero to Senior · Part 9 — Auth, Sessions & Security
Authenticate properly in the App Router: sessions vs JWTs, secure httpOnly cookies, a Data Access Layer, protecting pages and Server Actions, proxy.ts for redirects, and the security headers and practices every app needs.
-
Node.js Production Engineering 15 — Identity Architecture với JWT và OIDC
Thiết kế identity cho Node.js production: threat model, JWT validation, access/refresh token, atomic token-family rotation đa thiết bị, cookie/BFF, OIDC Authorization Code với state, nonce, PKCE và authorization theo resource.
-
Node.js Production Engineering 05 — Authentication và API Security
Thiết kế authentication và API security theo threat model: password hashing, session/JWT, cookie, OAuth/OIDC, authorization và defense-in-depth.
-
Web Security for Frontend Devs · Part 5 — Auth Tokens & Secure Storage
Where to store session and auth tokens in the browser: httpOnly cookies vs localStorage vs in-memory, JWT pitfalls, OAuth PKCE + BFF for SPAs, Set-Cookie hardening, and strict TypeScript patterns — with exercises.