~/talk

Authentication and Authorization in Next.js

Talkat ZEIT Day 2018 · on Saturday, 2018-04-28· [nodejs, security]

Claims that storing JWT in an HttpOnly cookie solves server‑rendered auth in Next.js and demonstrates it with a working demo: create token on login (including a magic email link flow), set cookie, verify token on server, and gate a secret page. Uses getInitialProps reading cookie on server and client, Auth0 Lock for providers, an Express custom backend, and deployment on zeit.co/Now. Source code and a Firebase example are linked; login, logout and cross‑browser session behavior all function as shown.

AI-written summary · about

  1. 0:00Start
  2. 0:30GOOGLE DEVELOPER EXPERT
  3. 1:27TRADITIONAL AUTHENTICATION - INVALID CREDENTIALS
  4. 2:19MODERN ARCHITECTURE FOR APPS
  5. 3:46JWT AUTHENTICATION CONTINUES
  6. 4:13JWT STRUCTURE
  7. 5:51Nextje: JWT Auth Approach
  8. 6:49Step by Step
  9. 8:25Next.ja: JWT Auth Approach
  10. 10:58Resources
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.