JWT Authentication Tutorial

JWT Authentication Tutorial - Node.js

4 роки тому

JSON web tokens are one of the more popular ways to secure applications, especially in micro-services, but JWT is much more complex than a simple session based user authentication. In this video I will be breaking down exactly how to set up authentication with JWT and how to ensure the authentication is secure. I will also be showing how to setup refresh tokens with JWT so that your application is even more resilient and secure. Lastly, I will show how to invalidate refresh tokens which is the ultimate last step in securing an application.
📚 Materials/References:
User Authentication Video: • Build Node.js User Aut...
JWT Explained Video: • What Is JWT and Why Sh...
GitHub Code: github.com/WebDevSimplified/J...
🧠 Concepts Covered:
- Creating Node.js authentication middleware
- Using refresh tokens with JWT
- Authenticating users with JWT
- Invalidating refresh tokens to log users out
- How to use JWT securely
🌎 Find Me Here:
My Courses: courses.webdevsimplified.com
Patreon: / webdevsimplified
Twitter: / devsimplified
Discord: / discord
GitHub: github.com/WebDevSimplified
CodePen: codepen.io/WebDevSimplified
#JWT #WDS #Authentication

КОМЕНТАРІ: 857

@RasmusSchultz Рік тому

If you're building your own authentication system, it's a really good idea to include a flag in your payloads, to indicate whether that token was generated by authenticating with user credentials, or by using a refresh token. You can use this flag to authorize sensitive operations, such as changing your password or making payments - so if the user didn't log in recently, you can prompt them to log in again for sensitive operations. I would say this is a must for most applications.

@abdulazeez.98 Рік тому

I’ve encountered this in some websites. Nice to know how it was implemented.

@duythinh252 Рік тому

What a great information right there! Thank you for sharing. I immediately recognize the use of the flag in payload when I changing my facebook password for example, it requests me to re-enter my password again for authenticating with user credential

@aynuayex Рік тому

ya.we love to see how we can implement that.

@shahreazneeloy2119 Рік тому

You have a UKposts channel. Please make a video on this topic

@mohammadalaaelghamry8010 11 місяців тому

Thanks for the note. it helped me.

@ROCKEFELLAPRODUCTIONS 4 роки тому

You nailed these tutorials! I actually understand what you are explaining. You don't dilute it with unnecessary lingo in an attempt to sound smart. Thank you!

@aram5642 3 роки тому

The single tutorial a dev should ever watch to get their heads wrapped around auth. Great pace and flow, pure English, pleasure to watch and listen to!

@chaop4o878 3 роки тому

I am so close to start crying of joy. I just spent so long trying to figure this out and then I found this video. Thank you so much. Honestly, you make my favourite tutorials.

@ryanlarge6296 Рік тому

Thank you Kyle for another great video!! Especially by making some confusing topics much clearer and understandable in such little time. I think that many of us could benefit a thousand times more from this jwt knowledge if you created a sequel to this video, or even simply a separate video all together explaining how this backend logic is tied in with the front end via a js framework or keeping it simple like ejs or regular html. There is not a whole lot of good quality educational videos or documentation covering how it can all be connected and implemented into a true fullstack application. It took me a very long time to figure out how to serve my front end as well as authenticate users with jwt using ejs. I would love to see a good video on this from you. Thank you again!

@SuperRockthing 4 роки тому

I discovered your channel 30 minutes ago and I have already subscribed. Your way of explaining things with minimum jargon and straight forward approach is so refreshing.Keep up the good work!

@WebDevSimplified 4 роки тому

Thank you so much! My goal with the channel is to teach the most amount of content in the least amount of time, since time is the most valuable resource we have.

@serkanakman9945 4 роки тому

@@WebDevSimplified that is what makes you and your channel great!

@phani123d 3 роки тому

@@WebDevSimplified great

@raymondyoo5461 2 роки тому

totally agree :)

@mosesegboh9034 Рік тому

True. He is one of the best ones.

@CodeDreamer68 2 роки тому

Thanks for keeping it simple! You are living up to your name. I watched 5 other jwt videos from well-known vloggers, and was still left confused. This one was spot on. I get it now. Thanks!

@tinnyw2 2 роки тому

Kyle has an amazing talent for teaching and this demystifies a lot of how to implement JWTs on the server end. If I may, one caveat I would add is adding access and refresh tokens in the body payload may be prone to being stolen in an XSS attack and depending on how secure you would like to make your site you might want to instead store them on http-only & secure cookies with a samesite set to at least lax so they're not read by Javascript and easily stolen. Again, this tutorial is on point on so many levels and amazing!

@3042640426 2 роки тому

Do you have any solution for that? Thx

@rajeshjamnadas 4 роки тому

No nonsense just straight to the point. Clear and precise explanation. Thanks you for time for a good tutorial, cheers!

@raisedbyreels 2 роки тому

Yeah, I appreciate tutorials like this, a perfect blend of explanation and implementation. Thanks a million!

@HamKibz 3 роки тому

It took me only 27 minutes to understand a simple concept that has been overly complicated by some bloggers. Thanks man, that was great.

@PaweAndruszkow 3 роки тому

this is how code tutorial video should look like! Simply, precize, no overtalking, just exact content we need, very good job!

@joonwantsdat 3 роки тому

I'm from South Korea, Kyle explains in a concise and straight plus simple easy way which makes me understand way better than Udemy courses.

@divyanshubhatnagar4601 3 роки тому

Have to say this was short and loaded with information. I really liked the part where you also explained the Auth and Resource server. Really appreciate the content :)

@drteeth11 4 роки тому

Yoooo, I just found your channel this week and wanted to let you know I love your content. Super informative, clear explanations, all around great videos. Keep up the good work!

@WebDevSimplified 4 роки тому

Thank you so much! I hope my future videos are just as useful.

@BrunoWinck 4 роки тому

same :) feeling very lucky

@majoulwa 4 роки тому

Hi, I would particularly like to praise your clear explanations and your super clear pronunciation. So it is very easy to understand, even for someone like me, who doesn't have a lot of experience in English and who often has trouble following English-language content with a strong accent. Really great!

@spetsnaz_2 3 роки тому

Man! every video of yours are most simplified on the web one could ever find.....Great work

@Bruno87198 Рік тому

Exactily what I need! You just got a new subscriber. Simple, direct to the point, no use of database and other things, really direct to the point! Saves a lot of time. Thank you!

@debmallyabhattacharya4394 4 роки тому

This lives up to its name. Truly simplified. 💙

@lordrampenthump422 2 роки тому

Its really hard to explain how valuable this channel is to me. Thank you for existing

@samgram5122 3 роки тому

You blink a lot, but holy crap! You speak so clearly and teach so well without any cuts! AMAZING! Thank you so much!

@number1neek 3 роки тому

Great video as always! Just wanted point out that what's being covered here is called authorization, not authentication. Authentication is when you confirm a user's identity and authorization is giving that user access to parts of the website

@juhandvan 3 роки тому

Kyle is a really good teacher. His tutorials helping me a better developer.

@lahiruudayanga5989 4 роки тому

Damn this is amazing. Wasted 4 hours watching shitty videos and then came through this. Just 30 mins and everything well explained on point. Thanks a lot bro. You got a new subscriber!!!

@WebDevSimplified 4 роки тому

Thank you so much!

@michelkazi3112 4 роки тому

I'm using sails JS and their documentation is a hit or miss with a lot of things. They also have support for sessions instead of JWT. Your explanation and walkthrough were so nicely made that I was able to translate the logic of signing and verifying JWT into helpers for my project. Thank you!

@raicubogdan8078 Рік тому

i love how effortless and efficient you explain everything. and all the tools you use are really cool and easy to setup. thanks!

@XiagraBalls 2 роки тому

Your tutorials are some of the best on YT and I watch a LOT of programming tutorials! 👍🏻👍🏻👍🏻👍🏻👍🏻 🌟🌟🌟🌟🌟

@igors1208 3 роки тому

The greatest video about jwt implementation on node i've found at internet! Thanks a lot!

@nithigd1014 2 роки тому

Thank you for explaining complex concepts in very simple and straight forward way I watched many of your videos and I learnt a lot of things that no body could teach in 1 video but you are way of explaination is awesome, you are one of the best teacher in the universe, thank you so much :)

@lautaro3365 3 роки тому

Dude this was the best video I've seen about JWT and how easy you made it to implement.

@brianchandler3346 3 роки тому

The absolute clearest tutorial I've ever seen on the topic. I wish I had found this earlier.

@higherpurpose1212 2 роки тому

This is the cleanest for me: ukposts.info/have/v-deo/kZ-UhqdkgpukpIE.html

@himbary 4 роки тому

Amazing quality, thank u. Just watched your jwt intro.

@LoveYourKitties 4 роки тому

Great stuff on JWT! I needed this info for my current project at work, and this came in extremely handy! Subbed!

@mykolakecha 2 роки тому

This is probably the first time I'm writing a comment to a video. The reason - just wanted to acknowledge the quality of content. Especially how nice & simple everything is explained.

@daniloespinozapino4865 2 роки тому

You did a really good job with this video dude. Simple and clean.

@eduardotavares76 3 роки тому

The best JWT video ever! You are amazing! Keep doing things like this.

@garrafromsand 3 роки тому

Very distinct skill of explanation, could not be more lucid than this, 2 days of here and there in 20 min

@techable7524 4 роки тому

Superb tutorial, video and sound! It's rare to find such quality. Subscribed and looking forward to more of your content.

@WebDevSimplified 4 роки тому

Thank you so much! I hope the rest of my videos are just as helpful.

@armaandhanji2112 4 роки тому

I LOVE anything you make related to Node.js. Thanks always

@WebDevSimplified 4 роки тому

Thank you! I'm really glad you enjoy my node videos because I love making them.

@farisfajar6982 3 роки тому

Thanks youtube for recommend this channel. I just started to learn programming two weeks ago and find your channel. It is great content for me even i still did not really understand it most of the part so i need to learn a lot from the scratch.

@quietnix 2 роки тому

Man, this is the most efficient tutorial on the topic. Where is your applause button dude.

@santhanamelumalai8025 3 роки тому

Thanks for the video, I never saw tutorial video without skipping its part, but you broke that with the great way of story telling. Very helpful video.

@scigama71 3 роки тому

i echo the sentiment that i have learned more with this video then reading books for hours.. Well done :)

@haha-eg8fj 4 роки тому

That Rest Client plugin is so useful! Works like a charm.

@SaadShah1133 2 роки тому

I tried to implement JWT by watching different tutorials but i couldnt understand it, your video was the only video i understood, best node js videos keep it up; great work

@dragmove 3 роки тому

This video is perfect for me to understand a concept of JWT token and refresh token. I really appreciate it. Thanks Kyle. :)

@alexanderzharkov6953 2 роки тому

Thank you, Kyle, for this informative content. I filled many gaps watching your videos and following your advices

@solofaxum 3 роки тому

Bro you are the best. That is all I can say. you simplify the complex. ...keep it up.

@lucaslorenzo6249 Рік тому

this is amazing, the way you explain all this concepts make it look easy

@codeforlife9513 3 роки тому

Kyle your video inspires me to learn more...and makes easy to understand all the aspects. Thank you so much.

@natyragashi982 Рік тому

Thank you man, you are one of the rarest who gives real solutions

@MrVipulLal 2 місяці тому

Your videos are always brilliant. A big 🙏

@atsglobalservices6136 Рік тому

God bless you dev. This tutorial was fantastic! I understand what you're saying. You don't dilute it with unnecessary jargon. Thank you very much.

@LuisPerroneF5 4 роки тому

Great video Kyle. Straight to the point! 👍

@dericbytes Рік тому

I always pick up something new from your videos. Thanks

@vladstanciu5923 3 роки тому

Really nice video, i just leared all I needed to know about jwt in order to use it in my project. Thanks a lot dude! Really big thumbs up

@JamesQQuick 3 роки тому

You're the JWT mastermind :)

@mohammedalmukhtar8949 4 роки тому

Another epic from the best dude on youtube ever!! thanks a ton, Kyle!

@WebDevSimplified 4 роки тому

Thank you!

@victorhugoolvera8773 Рік тому

Hello Fireship, I love your 100 seconds videos.

@aabhasdhaubanja1184 3 роки тому

Lovely video Kyle. Keep it up!

@mokroargra7277 4 роки тому

Nice video man, just found your channel. You explain things very well. I didn't have any trouble following what your doing.

@bobbyboxer2664 2 роки тому

Awesome video! Thank you for taking the time to do this type of content 🙌🙌

@cilcoposea 3 роки тому

Amazing stuff, keep on with the great work!

@princebillygrahamkarmoker2122 3 роки тому

Best tutorial on JWT token. You are straight forward and that's why I have already subscribed to your channel.

@winken2666 2 роки тому

I am very grateful for this tutorial, thank you! My hobby project is one step closer to not being a hobby project.

@unsignedchar000 2 роки тому

Great pacing, great delivery. Well done!

@JannisAdmek 2 роки тому

You have such a fantastic way of teaching!

@shambashibmajumdar1268 2 роки тому

Amazing! Your content always fascinates me and I learnt many things from you man!

@shikharsubedi 4 роки тому

thank you so much for the clear and concise explanation. I am looking forward to watching more videos from you.

@AwkworldStudios 4 роки тому

Thanks for making this! Fun fact for anyone else watching: you can configure dotenv from your package.json scripts so that you don't have to write require in every file by using the -r flag and dotenv/config like so: "scripts": { "dev": "nodemon -r dotenv/config index.js" },

@vinaydixit81 4 роки тому

Everything is good. But i would suggest you to be little slow when you do the code.

@AndreFreitasTech 2 роки тому

You have won a subscriber! Good content, thank you for sharing!

@antontrofymchuk3428 3 роки тому

It is just awesome. Unbelievable clear and useful explaining. So many thanks to you!

@DoubleDYouTube 2 роки тому

This video cleared up a lot of things regarding JWT. Thanks a lot!

@qintotgroup Рік тому

Where have you been all my life Bro. --- THANK YOU for making my job eaaaaaaasy.

@abdulkadirguven1173 Рік тому

Thanks a lot Kyle. Great video as always

@ghilmanfatih9751 2 роки тому

certified beginner-friendly enlighten my noob jwt knowledge in less than an hour

@chitrangsharma1362 3 роки тому

Best programming ASMR channel 💓

@Tibo437 2 роки тому

Thanks a lot from France for your video, this is so simple doing things with your explainations, please never stop ;)

@SimoneGesualdi 4 місяці тому

Thank u for your tutorials Kyle!

@gabrielmoura6342 2 роки тому

Amazing content. Learning a lot. Keep up the good work!

@nejitawo9657 4 роки тому

In just 30 mins i've learned what a ton of books couldn't explain clearly.

@juraev0056 4 роки тому

You must be reading a wrong book

@hagenlens1403 3 роки тому

@@juraev0056 Probably

@snoowwe 3 роки тому

Sometimes you just need to see it in action to understand it. I learn math better by example than by reading theory.

@jawad9757 3 роки тому

Is reading books about programming a thing? I mean it would be good for something like assembly or c or c++ but defo not for anything that is related to js

@juraev0056 3 роки тому

@@jawad9757 I think it is good to read about best practices and design patterns regarding any programming language

@borisnekezov6620 2 роки тому

Thank you for that great video Kyle! Really usefull and well explained!

@aubz9924 4 роки тому

Kyle, it would be amazing if you could make a video on how to handle JWTs on the client-side, particularly in React, in order to close the loop on this topic. As always, awesome video :)

@aspected 4 роки тому

I second this! I think Ben Awad made a video about that but doesn't go into much detail

@robertjif6337 4 роки тому

I want to see this too, wanna know if what I'm implementing is actually correct

@Robd515 3 роки тому

Funny, I'm coming to this video because I know how to implement it with React and not without it. I learned through Brad Travery so you may want to look through his videos.

@doberman7 3 роки тому

@@Robd515 could you share an URL?

@adityanair3566 3 роки тому

@Kyle, please see this comment! Awesome work man, you are giving immense value to society.

@arshadsiddiqui9071 Рік тому

Thanks man. I'm at a place where I'm essentially learning an all new stack and feel like I'm in tutorial hell. These are so efficient and make me feel like I'm close to begin finally working in it. (My usual experiment until it works just isn't working sadly)

@buhlemwanza632 2 роки тому

God Bless you man, this is great within 30 minutes JWT and auth isn't mystery anymore, keep it up, you're going to help a lot of people. God Bless you!

@bugdev7384 Рік тому

Awesome content, really well explained and nicely done, kudos!

@VishalKumar-dv6qj 2 роки тому

Everything was straight-forward and on-point. One question arises - Why we need to create a refresh token when we can delete the previous access token when user logs out? In that way he will not be able to use that access token forever

@umohesther2256 4 роки тому

Thank you for this tutorial. You nailed it.

@darkagent9457 Рік тому

Exactly what I was waiting for

@ConorBailey 3 роки тому

Kyle. Your videos are so helpful. Thanks so much.

@AbhishekKumar-vl3cb 3 роки тому

Have a good day you too...👍🎊 You just SIMPLIFIED my WEB DEV query in few minutes... ❤️🙏

@SavijCoder 8 місяців тому

I know this is kind of older, but great presentation, very clear! I have a similar video for doing this in c# (also pretty old), but love how you explained it all here. Thanks!!