Node.js Microservices: Authentication and Authorization
This course will teach you how to implement authentication and authorization with Node.js.
What you'll learn
Node.js is a robust and popular technology for implementing microservices, but as with any other technology, security becomes a concern that needs to be taken seriously. In this course, Node.js Microservices: Authentication and Authorization, you’ll learn to secure Node micro services using a number of authentication and authorization techniques. First, you’ll explore the Node libraries and facilities dedicated to security. Next, you’ll discover how to use these tools to implement authentication for micro services. Finally, you’ll learn how to integrate Node micro services with a leading secrets management tool called HashiCorp Vault. When you’re finished with this course, you’ll have the skills and knowledge of an application security professional needed to effectively secure microservices implemented in Node.js.
Table of contents
- Lets Kick the Tires and Light the Fires 1m
- Pressing Need for Microservices Security 1m
- Securing North-South and East-West 5m
- The Main Players in Authentication and Authorization 7m
- All About JWTs 5m
- Demo: Quick Setup 3m
- Demo: Creating and Testing Routes 4m
- Authenticating and Creating and Access Token 9m
- Authorizing Requests with JWT Tokens 6m
- Hitting Multiple Servers with the Same Access Token 3m
- Getting a Fresh Start with Refresh Tokens 10m
- Is the Refresh Token Working? 2m
- Shooting Our Microservices up to the Cloud 13m
- Demo: Uncovering the Mystery of Cognito 6m
- Can You Keep a Secret? 1m
About the author
George Smith has spent more than 25 years in the IT industry. During this time he has held a variety of positions, starting with web UI development and business analysis, progressing with system administration and infrastructure, then switching to core systems programming, technical consulting, and finally becoming an E-Commerce Architect and Subject Matter Expert. He is well versed in modern trends like Containerization, Infrastructure as Code, Serverless computing models, and more. George demo... more