Django & React Session Authentication and CSRF | Part 1 - Overview

🔥 Subscribe to my YouTube + Turn on Notification Bells!

Hey, Bryan here. I share videos that help web developers up their development skills!

Today I'll be sharing the first part for setting up a session based authentication system that I will help you implement using React, Redux, and Django with the Django Rest Framework. I will also be using Bootstrap for the styling in the application.

This is going to be a session based authentication system with some awesome features:
1. You will see how to implement session authentication in a Django & React app.
2. You will learn about what CSRF is and how we protect against it.
3. You will learn how to use a CSRF Token to protect your login and sign up pages.
4. You will learn how to use a CSRF Token to protect your authenticated API requests.
5. You will learn how to attach a profile to your user which you will be able to update.
6. You will learn how to add functionality for deleting a user through the user dashboard.

In this part, I will be doing an overview of the application that we will be building, and basically going over the different features that we will be implementing.

To stay up to date with the best web development content, make sure you subscribe to My YouTube channel Today!

[vivasvan]

This is one of the best redux react tutorial. Thank you so much

[iamaakashbasnet]

I was waiting for this tutorial! Thanks man!

[tscodertester]

It's amazing content but leaves out one important part - how do users reset their password if they forget it? Thank you

[rtme]

Need video on security tokens. Tokens in cookies and so on. Thanks for the Chanel !

[kelvinkipchumba]

I think session base authentication is the best

[Meshv_patel]

Can you make video on after login user, we can fetch user details and show name and pic of user in navbar .
Then fetch data according to user logging.
Currently I am making notes website but I don't know how to fetch notes according to login user...
Plz make video on this. I am waiting

[GeekyNasir]

You are live saver one series wit djrestauth with social login customuser model and react plzzz

[warboom]

how can you add a profile pic as part of your user profile?

[zakchips]

Thanks a lot.
Small question about this topic. Imagine we develop an e-commerce site where an anonymous user can add a product to his cart.
Usually we use sessions to make it possible (something like request.session ['cart_id'] = cart_obj.id.) Do I understand correctly that it's impossible to do the same if we use JWT authentication scheme and sessions are the only way to manage it. Thx again.

[egesavc]

whats the extension's name that you are using at 5:10 ?

[zakchips]

Thanks. Just one question: if we use sessions for auth does it mean that our API is not RESTful anymore?

[jzmyyov]

now I'm so confused, what's better to do authentication with session, or without it (like your previous tutorial)?
Both your tutorials are GREAT, now I can't pick which is the best approach, what do you think?

[mohammadali]

Bryan, please provide the link to the GitHub source code. In other series, you paste it in the description but not in this one.