Authentication on the Web (Sessions, Cookies, JWT, localStorage, and more)

In this video, we will cover the fundamentals of user authentication in modern web applications and websites. In particular, we will explore stateful (session-based) and stateless (token-based) auth, and examine cookies, JWT, and client storage in close detail. We will also touch on security aspects inherent with each authentication scheme and lay out practical strategies for implementing authentication in single-page apps and RESTful APIs.

[agustinbs]

Best video on web auth that has ever been produce by the mankind. Period.

[medi]

This video cant be better than it is now, dead simple, concise, strictly to the point, thank you so much for the GREAT content, keep up

[MasonE]

Dude. You are the man. The world needs more videos like this.

[twiggeh]

this is still, a year later, the best resource that I've found on cookies and sessions! Chapeau

[ArthurBurgan]

You're the man! It's incredible that we can consume this content for free in such a concise yet thoroughly delivered manner. A big thank you for the time you put in creating these videos and for sharing your knowledge with us!

[awabelmahe]

My goodness, man, not a single second wasted, just a non-stopping flow of information. Your videos are the best on the whole internet; concise, packed, and straight to the point. Thank you very much for what you're doing.

[nitindaphale]

LIKE from INDIA. At least 15 videos, 10 articles, countless days I spent to understand (10%) about authentication techniques and you refreshed that knowledge in one shot!

[girmamoges]

No one had explained like this, it is exceptional and beyond any online presentation that mankind has ever encountered.
Absolutely Phenomenal.
If a grade has to be given to you, you deserve for five courses in a term with
a grade of A+, A+, A+, A+, A+ with flying colors, or in simple terms " very great distinction" .

[fb_a]

This video must be the *prerequisite* video for every web development/backend course out there.
Thanks, man! crystal clear explanation!

[Oswee]

I would LOVE to hear the same topic but in context of SPA & WebSockets authentication (distributed micro-service systems). This is the No.1 explanation in the whole YouTube! You have a talent!

[NikogBazza]

This is the kinds of videos that I've been looking for like 3 years, Thank you so much Sr.

[MrFallout]

one of the damn best video I've seen on the topic. Well done sir! And thank you!

[ninadmanjaramkar]

This is the single most amazing piece of information on web auth on the entire internet. Wow.

[TheLordoftheDarkness]

Finally, an explanation for web authentication for people who are not 5 years olds.

[muj]

Best video on Auth. Deserves to be ranked higher by Youtube ...

[fooked]

This video summarizes hours of other videos and blog posts all over the Internet. Well done.

[karma_yogi_]

i tried this same style to create a tutorial on php. i got pummeled down with down votes. people didt like it when i read out from a slide show. but you! you have done a great service to a lot of people. thank you!

[jaycelila]

hey you! solve most of the missed bridges in my brain. you deserve thumbs up

[JimLloyd]

Nicely done. Clear and concise. One tiny quibble: The word "opaque" should be pronounced as "oh-pake", not as "oh-pack". It is a word borrowed from optics, where it means non-transparent. One might say that a one-way mirror is transparent on one side and opaque on the other.

[BharCode]

Full, comprehensive, unbiased and objective unlike most of the speakers go gaga about 1000% STATELESS blah blah!
Only REAL benefit I can think of jwt is, that it can mitigate DDSA, that a Front End service, which can reject the request with a just simple signature verification made on JWT, instead of every time going down to authenticate and then reject, as in the case of stateful.