Survival Guide to Building Your Authentication for Developers
summary
Practical guide on implementing authentication for web apps, covering common developer questions and pitfalls such as choosing between JWTs and cookies, configuring clients for SSO with OpenID Connect (OIDC), and preventing unwanted session logouts. Uses real-world stories and concrete examples to show trade-offs and best practices, and gives actionable improvement ideas and fixes for existing applications.
AI-written summary · about
chapters (9)
- 0:00Authentication introduction
- 1:07Secure password storage
- 6:02Credential stuffing protection
- 7:25Session security and XSS
- 11:57Stateful vs stateless sessions
- 13:44How JWTs work
- 17:55CSRF attacks and fixes
- 22:10OpenID delegation
- 35:16Conclusion
related talks
55mBuilding Perfect Authentication in Your JS Application
44mThe Art of Authentication for Web Apps
48mSecurity Practices for Developers
01h 01mBuilding Clients for OpenID Connect/OAuth 2-based Systems
18mInterview Speaker
44mStop Writing Your Own Authentication!
55mYou Shall Not Password: Modern Authentication for Web Apps
45mMastering OAuth 2.0 and OpenID Connect