This course provides a deep dive into **authentication and authorization** mechanisms in modern web applications. You will learn how to securely store passwords, implement role-based access control (RBAC), and protect against authentication attacks. The course follows an **offense-defense approach**, exposing vulnerabilities before applying secure coding practices.
Overview
Syllabus
Secure Password Storage & Authentication
- Implementing Password Hashing for Security
- Fixing Salt Rounds Data Type
- Secure Password Verification with Bcrypt
- Enforcing Strong Password Requirements with Zod and Bcrypt
Implementing Secure Authentication with Rate Limiting
- Protecting Login Routes with Rate Limiting
- Testing Your Rate Limiting Defense
- Adding Informative Rate Limit Headers
Implementing Role-Based Access Control (RBAC) in TypeScript
- Implementing JWT Authentication Middleware
- Implementing Role Based Access Control Middleware
- Implementing Multi-Role Access Control
- Implementing Dynamic Role Management API
Protecting Against Brute Force & Credential Stuffing
- Enhanced Security Logging with Metadata
- Detecting Suspicious Login Patterns
- Securing Sessions Against Suspicious Activity
- Categorizing Suspicious Login Patterns
