Make your Angular app a max security prison

on YouTube ↗33m

" summary

Demo builds a tiny Angular SPA plus a Node backend that issues JSON Web Tokens and it actually works after some typos; implementation shows signup/login endpoints that return an ID token, storing it in localStorage via Angular storage, attaching it to every request with an JWT interceptor, and protecting routes by checking token presence and expiry with Angular-JWT. Live coding includes the exact curl/data flow: header = Authorization: Bearer <token>, token signature validation on the server, and rejection when signatures or secrets mismatch.

AI-written summary · about

" chapters (9)

1. 0:00Modern auth challenges
2. 2:16Token-based auth needed
3. 8:02How JSON Web Tokens work in practice
4. 11:06Live coding setup
5. 19:33Login and token storage
6. 24:02Sending tokens with API
7. 27:35Protecting routes in SPA
8. 30:47Decoding token client-side
9. 32:32Closing remarks

" related talks

• 39mLogin and Access Control in AngularManfred Steyer · Ng-Poland 2017
• 19mAngular's User Authentication Tool BeltKim Maida, Ryan Chenkie · ngAtlanta Conf 2018
• 28mA Token Walks Into a SPA...Ado Kukic · ngVikings 2018
• 46mThe Amazing Angular 2Gerard Sans · Jazoon TechDays Spring 2016 Bern
• 26mAngular Router Authentication and Authorization Real LIVE LIVE LIVE LIVE LIVE DemoShai Reznik · ng-conf 2017
• 25mAuthstronomy: The Science of Authenticating Angular AppsKim Maida · ngVikings 2019
• 26mThe Science of Authenticating Angular AppsKim Maida · AngularUP 2019
• 30mThe science of authenticating Angular appsKim Maida · AngularConnect 2019