This course covers the fundamental principles of **session management security** in web applications. You will learn how sessions work, their role in authentication, and the risks of improper session handling. The course follows an **offense-defense approach**, demonstrating common session attacks before implementing secure solutions.
Overview
Syllabus
- Unit 1: Introduction to Session Management
- Session Configuration in Express App
- Implementing Login with Session Authentication
- Implementing Secure Session Logout
- Protecting Routes with Authentication Middleware
- Unit 2: Implementing Secure Sessions in TypeScript
- Securing Session Configuration in Express
- Preventing Session Fixation During Login
- Implementing Complete Secure Authentication Flow
- Unit 3: Implementing Secure Session Expiry Policies
- Implementing Absolute Session Expiration
- Implementing Idle Timeout for Session Security
- Preventing Session Fixation During Authentication
- Unit 4: Enhancing Session Security in TypeScript
- Implementing CSRF Protection with Express
- Securing Login with CSRF Tokens
- Handling CSRF Errors in State Changing Routes
- Graceful CSRF Error Handling Implementation