Introduction to Authentication

Welcome & How to Use This Course

Authentication: Proving Who You Are

Authorization and the Golden Rule

Check Yourself

Never Store Plaintext: Hashing vs. Encryption

Choosing a Hash and Verifying a Login

Check Yourself

Server-Side Sessions

Stateless Tokens, Cookie Security, and Trade-offs

Check Yourself

Anatomy of a JWT: header, payload, signature

Using JWTs Safely: Verification, Lifetimes, Storage, Revocation

Check Yourself: JWTs

OAuth 2.0: Delegated Authorization, Roles, and Scopes

OpenID Connect: ID Tokens and the Authorization-Code Flow

Check Yourself: OAuth 2.0 and OIDC

Why One Factor Is Not Enough

TOTP, Passkeys, and Passwordless Login

Check Yourself: MFA & Modern Options

Do Not Roll Your Own Auth

Common Pitfalls, a Checklist, and Course Recap

Check Yourself: Building Auth Safely