React: Authentication

Introduction

• Secure authentication practices in React
• The structure of this course

1. User Authentication Basics

• What is user authentication?
• Basic project setup
• Creating private React routes
• JSON Web Token basics
• Solution: Working with JSON Web Tokens
• Adding a sign-up route to the server
• Generating JSON Web Tokens
• Adding a log-in route to the server
• Adding JWTs to the front-end
• Parsing JWT data
• Adding JWTs to sign-up and log-in pages
• Adding JWTs to the user info page
• Adding an "update user" route
• Adding update functionality to the front-end
• State management for tokens
• Adding log-out functionality

2. Email Verification

• The basic email verification process
• Setting up an email provider
• Creating an email provider API key
• Sending emails from Node
• Integrating verification tokens
• Adding a "please verify email" page
• Adding a verify email route
• Creating a verification landing page

3. Resetting Passwords

• The basic password reset process
• Adding a "forgot password" page
• Sending a "reset password" email
• Creating a "reset password" landing page
• Adding a "reset password" server endpoint

4. OAuth

• OAuth basics
• Setting up OAuth on Google
• Adding an OAuth URL route
• Creating a "sign-in with Google" button
• Adding an OAuth callback route
• Loading user info from Google
• Creating new users from OAuth data
• Handling successful OAuth authentication

5. Prebuilt Auth Options

• Why prebuilt auth options?
• Authentication with Auth0
• Authentication with Firebase
• Authentication with NextAuth.js
• Authentication with Clerk
• Authentication with AWS

6. Best Practices

• Using HTTPS and SSL
• Salting and peppering passwords
• Solution: Adding salt and pepper
• Never trust the front-end
• Authentication error handling
• Catching & handling errors
• Securing your database

Conclusion

• Next steps in your React journey

Appendix

• A tour of Coderpad