Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

Preventing Refresh Token Abuse in Your TypeScript REST API

via CodeSignal

Go to class Write review

Overview

Modern web applications frequently rely on refresh tokens to seamlessly re-authenticate users without forcing them to log in repeatedly. While convenient, mishandling refresh tokens can grant attackers near-permanent access.

Syllabus

  • Unit 1: Implementing & Rotating Refresh Tokens
    • Creating the RefreshToken Model
    • Implementing Token Generation and Management
    • Implementing Single Use Refresh Token Rotation
    • Robust Error Handling for Token Rotation
  • Unit 2: Detecting and Protecting Against Stolen Tokens
    • Building a Token Security Audit Trail
    • Implementing Token Theft Detection Logic
    • Implementing Security Responses for Token Theft
    • Analyzing Token Usage for Security Risks
  • Unit 3: Blacklisting and Forced Revocation in TypeScript REST API
    • Building the Token Blacklist Model
    • Implementing Token Revocation Core Function
    • Implementing Token Blacklist Verification Middleware
    • Implementing Admin Token Revocation Endpoint
  • Unit 4: Context-Aware Validation & Advanced Token Lifecycle Management
    • Implementing Role Based Access Control
    • Implementing Token Blacklisting for Security
    • Preventing Token Theft with IP Validation

Reviews

Start your review of Preventing Refresh Token Abuse in Your TypeScript REST API

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.