基于Cookie的安全验证系统React Next.js – Cookie Based Secure Authentication System

所有出色的应用程序在上线之前都需要安全有效的身份验证系统。关于将JWT令牌保存在本地存储中以进行身份​​验证相关的不安全性有很多讨论。

通常，在构建安全身份验证时，cookie被认为是更好的解决方案。与本地存储不同，浏览器中的JavaScript无法访问仅HTTP cookie。您的服务器将仅向客户端（浏览器）发布http cookie，并且每次将请求发送到其原始服务器时，它将在其标头中包含cookie。因此，您的服务器将可以控制它发出的cookie。

借助一些npm库，我们还将能够保护自己免受CSRF（跨站点请求伪造）攻击的攻击，这些攻击通常与基于cookie的身份验证相关。

在本课程结束时，您不仅将构建可快速生产且安全的身份验证系统，而且将拥有一个可靠的样板项目，可将其用作将来所有项目的基础入门套件。这样，您可以节省大量时间和设置登录，注册，身份验证，受保护页面等基础项目的麻烦。

因此，如果您一直担心应用程序的安全性，那么本课程将是您的最终解决方案。

MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 36 lectures (4h 53m) | Size: 1.85 GB
Learn to build secure production ready react apps with cookie based authentication system instead of using local storage

What you’ll learn:
Learn to implement secure authentication system using cookies
Learn to use cookies instead of local storage
Learn to integrate react and nextjs project with nodejs express and mongodb API
Learn to protect your API with CSRF (cross site request forgery) attacks
Learn to create protected pages
Learn to use context API to build your own redux like state management
Learn to use Ant design and Bootstrap 4 with react and nextjs
Learn to build a boilerplate project that can be used as a base for all your future projects

Requirements
Previous experience with the basics of reactjs

Description
All great apps requires secure and performant authentication system before going live. There is a lot of discussion about the insecurities associated with saving JWT tokens in local storage for authentication purpose.

Generally cookies are considered much better solutions when it comes to building secure authentication. HTTP only cookies are not accessible to JavaScript in browser unlike local storage. Your server will issuehttp only cookie to the client (browser) and it will include cookie in it’s headers each time a request is sent to its origin server. So your server will have control over the cookie it issues.

With the help of some npm libraries, we will also be able to protect ourself from CSRF (cross site request forgery) attacks which are generally associated with cookie based authentication.

By the end of this course not only you will have build a production ready fast and secure authentication system, but also have a solid boilerplate project that can be used a base starter kit for all your future projects. This way you save a lot of time and headache of setting up the base project with login, registration, authentication, protected pages etc

So if you have been concerned about the security of your apps, this course is your ultimate solution.

Who this course is for
Any react node or MERN stack developer looking to build production ready authentication system using cookies
Anyone looking to build a auth ready boilerplate project that can be used as a base for future projects