Node.JS Express Security: Authentication and Authorization

This bootcamp has a goal to introduce web application development with Node.JS and Express. For database, we use MySQL to store the data. The bootcamp focuses on security and authorization. The following is a list of highlight topics:

Use Registration

Authentication

Authorization

We start to learn about user registration. We create a registration form with Node.js and Express. We use Handlebar for Express Template View. User email will be confirmed in our application. To prevent from bots, we implement CAPTCHA on registration. We use reCaptcha from Google.

Database Design for User Registration: MySQL

Setting up project

User Registration

User Registration with Email Confirmation

Resending Email Confirmation Token

Implementing CAPTCHA on User Registration

Signing with Social Media Providers: Twitter, Google, Facebook, GitHub and LinkedIn

Next topic is authentication. We will challenge users to verify user account. We use username and password for authentication. we can enable for user authentication with confirmed email. Each user email that doesn’t be confirmed yet will not access web resources. We also implement multi–factor authentication. We send codes to user email to verify user authentication.

Last, we implement Role–based authorization. We define user roles and then assign roles to each user. We will implement authorization with Express middleware.