Two Factor Authentication & JWT | Spring boot + Angular | Full application

🎁 🚀 COUPON Code: EARLY_BIRD_30

Recommended Courses:

CONNECT WITH ME:

Welcome to my channel! In this video, we're thrilled to showcase an innovative and secure application implemented using Spring Boot, Angular, JWT (JSON Web Tokens), Google Authenticator, and Two-Factor Authentication (2FA).

🚀 In this cutting-edge project, we've combined the power of Spring Boot and Angular to build a robust and user-friendly web application. Spring Boot provides a solid foundation for the backend, offering effortless configuration and seamless integration with various libraries.

🎨 On the frontend, Angular shines with its dynamic and responsive user interface, ensuring a smooth and engaging user experience. We'll take you through the steps of creating a sleek and modern interface that complements the application's backend functionalities.

🔒 Security is our top priority, and that's why we've implemented JWT for secure user authentication and authorization. JSON Web Tokens allow us to issue secure tokens to users upon login, eliminating the need to store sensitive data like passwords on the client or server-side.

💡 But we didn't stop there! We've gone the extra mile to ensure maximum protection with Google Authenticator and Two-Factor Authentication (2FA). With 2FA, users get an extra layer of security beyond passwords. We'll demonstrate how to enable Google Authenticator as the second factor, making your application virtually impenetrable against unauthorized access.

🔧 Throughout the video, we'll guide you step-by-step, explaining the code implementation, sharing best practices, and addressing potential challenges.

🎯 By the end of this tutorial, you'll have a comprehensive understanding of how to build an application with the perfect blend of performance, security, and user experience using Spring Boot, Angular, JWT, Google Authenticator, and 2FA.

#Angular #jwt #2fa #2factorauthentication #alibou #aliboucoding

Table of content
-----------------------------------------------
00:00 Introduction
02:11 What you need to better follow the course
04:24 What is 2FA?
08:53 2FA flow
11:01 Extend the user & Registration request
13:24 Update the registration process
16:00 Implement the 2FA Service
24:37 Adapt the registration method
28:28 2FA Login flow
29:39 Implement the login flow
31:17 Add the Verify code method
33:16 Implement the Verify code method
36:08 Create a new Angular project
37:16 Generate the components and create the routes
39:50 Create the registration form
42:40 Implement the authentication service
46:02 Implement the registration
55:57 Generate the code with Google authenticator
57:28 Implement the verification process
01:03:17 Test the full registration process
01:06:00 Implement and test the Login process
01:12:50 Add an Auth guard
01:17:21 Full application test
01:19:02 Outro

[BoualiAli]

Join the Micro Services course waiting list and get and get an exclusive EARLY-BIRD discount

[nam]

This is a good tutorial. Thank you and I wish you more success.

[bhaskardixit]

Thank you for serving community. I have found this channel upto the mark with good explaination.

[sanjmgr]

Thank you for implementing 2FA. When verifying TOTP, if the email and code match, it generates an access token without requiring the password. It utilizes the User object to generate the Authentication Object. This means that with just the endpoint, email, and code (excluding the password), an accessToken can be generated, which may not be the intended behavior.

[gabrielfono]

As software engineer here is seattle waghinston after teaching myself coding for two years , I can tell you are doing an amazing job.
I will just purchase your course to update my skills.
Thanks a lot

[restonspositifs]

I like this man. He is good and speak very well in English and in French. Proud to discover your Youtube channel

[charlesfouquet]

Man, with this video series of yours (especially Spring Security & JWT, JWT Logout and this one), you litteraly saved my end of retraining course exam! I'm changing careers from Sound Engineer to Software Engineer, and you did such a good job explaining abstract concepts that I now see clearer and feel more confident talking about my app's security during the exam! Thank you a lot again, and I'll stick around for the next videos 😉
Take care 😃

[amirkenesbay]

First. Thank u for an amazing tutorial

[alextech]

Solid video! Thank you so much for the free content, it's much appreciated!

[dilipkumarbk]

A request for the cors related video, it's most required and it'll definitely be a great video. Respect from India sir. Thanks for this video. 😊😊

[phamust]

Solid content and straight forward as usual.
Thank you Alibou!

[iuliusciorica]

Exactly what I was looking for, thank you!

[raxkhmanLite]

Quality material✨ Thank you for your hard work!🙇‍♀

[amineamine]

Amazing video as always ✨✨✨✨ This was very informative and comprehensive.
Could you please do a video of social media authentication with Spring boot and a front end framework like Angular. I think that would be awesome !!

[yousfimarwen]

in angular When you use providedIn: 'root' in the service's metadata, you don't need to explicitly add the service to the providers array of the AppModule :)

[merxxibeaucoup]

Thank you for your hard work and kindness, Ali
i kinda do have a question the verificationRequest takes in two inputs (email and code) but i see you passed only the code when asked to verify

[sovannborithyun]

Amazing idea as always.

Would be best to add refresh token and logout with Angular project.

[nesier]

Hello, I would like to point out that in the frontend we didn't specify a role nor did we set it to user by default. I may be wrong though. Anyways, another amazing video in an amazing playlist that literally saved my life.

[siwarbouali-fvco]

ce playlist c'est une authentification single Sign-on ou non ?

[martianstarslit]

Where can I get or code of spring security where both users are not admin. Eg, you are creating a Doctor and Patient app. Each person login depending on their roles. No admin creates any of them