Node.JS Express Security: Authentication and Authorization

此训练营的目标是介绍使用 Node.JS 和 Express 进行 Web 应用程序开发。对于数据库，我们使用 MySQL 来存储数据。训练营侧重于安全性和授权。以下是重点主题列表：

使用注册

验证

授权

我们开始学习用户注册。我们使用 Node.js 和 Express 创建了一个注册表单。我们将 Handlebar 用于 Express 模板视图。用户电子邮件将在我们的应用程序中确认。为了防止机器人，我们在注册时实施了验证码。我们使用 Google 的 reCaptcha。

用户注册数据库设计：MySQL

设置项目

用户注册

使用电子邮件确认的用户注册

重新发送电子邮件确认令牌

实现用户注册验证码

下一个主题是身份验证。我们将要求用户验证用户帐户。我们使用用户名和密码进行身份验证。我们可以通过确认的电子邮件启用用户身份验证。每个尚未确认的用户电子邮件将不会访问网络资源。我们还实施多因素身份验证。我们将代码发送到用户电子邮件以验证用户身份验证。

最后，我们实现了基于角色的授权。我们定义用户角色，然后为每个用户分配角色。我们将通过 Express 中间件实现授权。

MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English | Duration: 21 lectures (1h 55m) | Size: 955.1 MB

Mastering authentication and authorization with Node.JS Express

What you’ll learn:
Implementing authentication on web application with NodeJS Express
Implementing authorization on web application with NodeJS Express
Applying CAPTCHA On User Registration
Building Authentication-based JWT Token
Multi-Factor Authentication for NodeJS Express
Building Roles-Based Authorization for NodeJS Express

Requirements
Having knowledge of basic NodeJS programming

Description
This bootcamp has a goal to introduce web application development with Node.JS and Express. For database, we use MySQL to store the data. The bootcamp focuses on security and authorization. The following is a list of highlight topics:

Use Registration

Authentication

Authorization

We start to learn about user registration. We create a registration form with Node.js and Express. We use Handlebar for Express Template View. User email will be confirmed in our application. To prevent from bots, we implement CAPTCHA on registration. We use reCaptcha from Google.

Database Design for User Registration: MySQL

Setting up project

User Registration

User Registration with Email Confirmation

Resending Email Confirmation Token

Implementing CAPTCHA on User Registration

Next topic is authentication. We will challenge users to verify user account. We use username and password for authentication. we can enable for user authentication with confirmed email. Each user email that doesn’t be confirmed yet will not access web resources. We also implement multi-factor authentication. We send codes to user email to verify user authentication.

Last, we implement Role-based authorization. We define user roles and then assign roles to each user. We will implement authorization with Express middleware.

Pre-requisite

Having knowledge of web development such as HTML5, CSS and JavaScript

Having knowledge of Node.js development

Computer with installed Windows , Linux or macOS

All materials are delivered with step-by-step approach. See you on my course.

Who this course is for
Web developers
Any web developer who wants to build NodeJS Express application