Coursera Plus Annual is 50% Off — Ends June 17.

Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

Preventing Refresh Token Abuse

via CodeSignal

Go to class Write review

Overview

Modern web applications frequently rely on refresh tokens to seamlessly re-authenticate users without forcing them to log in repeatedly. While convenient, mishandling refresh tokens can grant attackers near-permanent access.

Syllabus

  • Unit 1: Introduction to Refresh Tokens
    • Implementing the RefreshToken Model
    • Implement the CreateAuthTokens Helper Function
    • Implement Refresh Token Rotation
    • Add Comprehensive Error Handling to Token Refresh
  • Unit 2: Detecting Stolen Tokens
    • Implement the RefreshLog Model for Token Theft Detection
    • Implement Token Theft Detection in the Refresh Endpoint
    • Implementing Security Response for Token Theft Detection
    • Implement Security Analysis for Refresh Token Logs
  • Unit 3: Implementing Token Blacklisting
    • Implement Token Blacklist Model
    • Implement Token Revocation Service Method
    • Implement Token Blacklist Checking in Authentication Middleware
    • Implement Admin Token Revocation Endpoint
  • Unit 4: Context Aware Validation
    • Implement Role-Based Access Control Middleware
    • Implementing Token Blacklisting
    • Implement IP Address Validation for Tokens

Reviews

Start your review of Preventing Refresh Token Abuse

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.