Everything You Ever Wanted to Know About Authentication

[@yapayzeka]

dude stop developing and go with the education bussiness. you are king. very very explanatory. thank you very much.

[@vaylx2253]

Man you know what's awesome? When you've been studying web dev for a few months and you're familiar with 90% of what was done here :) Awesome talk, thanks!

[@bjojosimpson]

The deeper you go and the experienced you become, the faster this feeling will fade away. You are welcome.

[@sgtduckduck]

@ReivenIV dunning Kruger is a hell of a drug

[@shenth27]

Great talk by a bodybuilder..

[@ahora1026]

developers should take care of their health more than others. because they sit all day night

[@IdiotGaming]

he just did 1 push-up when he got an error

[@yogitasheth5144]

SO MUCH COVERED IN 30 MINS!!!!! AWESOME EXPLANATION!!!!!!

[@thomas-sinkala]

One of the best technical talk I have ever watched.

[@guiAI]

The best talk on authentication, and i needed this for nodejs. This is perfect!

[@cientifica9150]

This man is a legend , his video is 100% useful and straightforward Thank you so much for this

[@victortruong2538]

Damm that might be one of the best presentation I have seen in a while

[@Enderwolf23]

This is a great beginner guide for really basic authentication. I was hoping this would be a talk about different types of authentication. I guess I should have read the video description. I know I'm 5 years late to the party but maybe somebody else will see my comment and spare themselves a half an hour. (not trying to knock the guy, just the title was misleading and not what I was looking for)

[@cientifica9150]

Hey! Hello I'm a beginner in all this and I'm very interested and in this topic, do you have recommendations about what sources (books, videos, free courses) can I use to learn more about authentication?

[@alekkras3487]

Give this dude an hour next time :) Great talk!

[@srijanpaul]

He was very efficient with his time slot! Great talk

[@khaledlakehal5450]

I love this guy 😂 I love the language and how he sees things. You can say he really understand what he’s talking about from first second.

[@ismailnurudeen]

This was very insightful. I had to rewatch the last half just to solidify the concepts. Thanks.

[@Abhinavhind]

This is the best tutorial for web authentication. Thanks Twillio

[@ChiCity511]

at 15:32 shouldn't it be checking for a session token or something not the user_id?

[@haopeiyang3443]

Same thing I was thinking. The session cookie seems to be the user._id and if this bit of info is leaked to the public, then it's easy to mimic a session of another user just by setting the cookie manually. This is how I saw it. I may be missing something.

[@fnShun]

@@haopeiyang3443 I guess, to avoid this, the "httpOnly"-flag is used

[@fabianmeyertoens]

It is checking for the req.session.userId because that is set on the server after a successful login (14:44). This is not coming from the client.

[@arindam1249]

wow! loved the talk

[@vishalrana4526]

I got Goosebumps. Awesome talk.

[@周亮-m4i]

This sharing is awesome, shared the basic concept of authentication in really short time.

[@Sun0fABeach]

Very clean and easy to follow overview!

[@twilio]

Thanks for watching!

[@birdofhermes6152]

So glad CSRF was included.

[@ineptDev]

Unbelievable quality of the material. Biiiiiiig LIKE!

[@allanjunli]

This guy is amazing, learned so much.

[@ksubyslowed]

I saw the Talk from 2015 and this looks the same but the 2015 talk was so good , I am gonna watch this one

[@true_tamilan]

He is talented and verbose. Thanks man

[@martinh9099]

Really good explanation, many thanks. Couple of points though (1) Passwords should be "salted" prior to hashing (2) SSL is now deprecated, TLS should be used

[@clietech]

I think the time was too strict to speak about it. but bcrypt by default uses salts. $2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy \__/\/ \____________________/\_____________________________/ Alg Cost Salt Hash

[@garyhost612]

🙌

[@cientifica9150]

Thank you

[@azianzheep]

bcrypt automatically generates a random salt and salts the password before hashing

[@cientifica9150]

I have a question, can somebody help me? In 2:47 he says that for the sake of simplicity for this video he was going to put all the login of the app inside server.js file *but*, he says that we should never do that in the real word. My question is, then what should we do? separate files in modules in JS? or something like that? Sorry if I said something stupid but I'm just starting on this... thank you

[@Bloipapp]

Amazing talk for so many reasons. JWTs are still popular as the next shiny toy and 6 years later only 8,000 views.

[@thatguy-tl1gb]

Amazing talk, covered important concepts in a short time.

[@nachiketkanore]

Great security tips by a bodybuilder!

[@cientifica9150]

6:27 how can I visualize this JSON?

[@Akshatgiri]

Loved the talk and the presentation. Unfortunate that they cut the time in half. Would've loved to hear more about new auth techniques like auth2.0, open id, authentication with serverless architechtures and JAM stack. Honestly I don't know much about them either, still learning.

[@anklebar1]

top web dev video all time!

[@muhammadmughal4258]

Sir, you are requested to make some video that elaborates API / web-sockets oAuth and related stuff. i dnt have a programming background, but your video made much of the things easier then easy. :-)

[@trailerhaul8200]

Lots of things are packed together to form a nice presentation. Just like a body builder lol

[@arseniotedra4573]

Good 🌹 morning Sir and to ALL thanks for the business updated God bless to ALL 💕❤️👍✔️👌🥇☺️ the times 💕❤️👍✔️

[@karimk8551]

Wouldn't you be able to add the req.user field manually with something like postman and trick the server into thinking you are a user?

[@uwaishalikhan6963]

You have done gr8 job bro.

[@danielgospodinow]

Absolutely perfect explanations!

[@ep4500]

This is mana from heaven

[@alabhyajindal]

Great talk, thanks!!!

[@sevenred2803]

Bravo! This guy is a BEAST

[@anispathima5845]

Clear Explanation... Thank you so much...

[@qu4ku]

beautiful! [this comes from the men that don't use exclamation marks lightly].

[@shahidahmads]

Learned so much in 30mins!

[@omirosvasdaris7697]

Interesting talk.

[@tenminutetokyo2643]

Kudos for keeping it short.

[@nitreall]

what if you have more than one server? Will the authentication still work?

[@mayankramina]

Great talk!!!

[@osta6212]

very helpful session!

[@pareshkoli5356]

brooooooo thank you so much

[@FictionsAndIllusions]

Omg, I finally get it! Thanks a ton!!

[@chezy8148]

Let's actually implement that sh*t 😂

[@lilyydotdev]

great talk but salting is very important too

[@Nickcave1994]

Thanks Rambo Guy!

[@prayk11]

Amazing talk!

[@IamAWESOME3980]

how about basic authentication?

[@Ibukundaniel]

You are the best! Thank you

[@rosalyna_24]

i wish if he has a full course

[@renanreismartins]

What a great content.

[@PinguinoSod]

very useful thank you!

[@immigrationtime]

Hey, look! I only have 30 mins and thats why I’ll spend half of the time describing the toolset

[@Enderwolf23]

right..lol

[@crystalyun833]

he is a chad in developer community

[@raykudjie2365]

amazing stuff

[@weiyang1678]

Is he researching authentication? I think he is preparing to beat me ;)

[@OKOK-hm2is]

7 minutes in and authentication has not even started i've seen 100 seconds videous about modern authentification methods that cover more info that this one

[@aminuabdulsalami4325]

Awesome...

[@techbegginer6271]

you should get 1hr. awesome talk bro

[@jgunther3398]

this isn't anything you wanted to know about authentication, but is a decent tutorial on node servers, which is kind of the opposite, plus oral potty fixation

[@caerulemusic]

7:05 if u know u know

[@quirkyquester]

This guy rocks!

[@divyanshupandey1702]

I did the same and it took me 5-6hrs configuring passport.js and then i came here

[@matelaszlototh9683]

That was awesome!

[@vikas9358]

Miss leading title. Authentication and Web Authentication are 2 different things.

[@katerinaboboshko8554]

Thank you!

[@abhisekdash8062]

good

[@threeone6012]

Perfect!

[@fun_at_work]

That password would have been way more secure if he would have added a second '!'.

[@azeyn2050]

Awesome!

[@SaberOubella]

great

[@yuhao8430]

thanks dude!! that's legit!!

[@abhisekdash8062]

checking data replication strategy for youtube

[@What_was_wrong_w_jst_our_names]

be my boss

[@mohamethseck]

Perfect 👌🏽

[@sunnysrivastava7575]

Here is the 50 minutes version kzbin.info/www/bejne/n2jSl2NonsiDr7M

[@FordExplorer-rm6ew]

Thankg u

[@joseromeocantiller3168]

More Thanks for your help! We received your information, GOD BLESS, SIR! ISAIAH 41:2,7,25 GOLDSMITH

[@cadar8472]

Gold

[@krackytech2344]

what a chad

[@yassirbenali4333]

perfect

[@probhakarsarkar2430]

♥️♥️♥️

[@shallbee.]

Nice joke about Canadian police :D

[@MatthewBowe]

This guy needs a more professional vocabulary.

[@galanoth17]

I don't like it when they start dropping F bombs in a professional talk. You are not chillin with your buddies. Be professional.

[@FlorianEagox]

I thought it was a bit awkward as well, but the rest of the talk was fantastic.

[@mrdza96]

Oh shut up you snowflakes...

[@Enderwolf23]

eh most programmers I know swear. I didnt even notice he was swearing

[@move1649]

the yahoo joke is pretty lame