Module
Sessions, Cookies, and Authentication
Sign in to add this module to your path and practice.
About
Cookie attributes (Secure, HttpOnly, SameSite), server-side sessions vs client-side tokens (JWT overview and pitfalls), password storage (hashing + salt + slow hashes), login/logout/CSRF defenses, OAuth2/OIDC high-level flows, and authorization (RBAC basics).
Goal
Add session- or token-based authentication and simple role checks to the full-stack app; demonstrate secure cookie flags, password hashing, CSRF protection for cookie-based flows, and explain trade-offs vs bearer tokens.
Unlocks
Tutor
Ask questions about this module.
Hi — I'm your tutor for Sessions, Cookies, and Authentication. Ask about the concepts, goal, or where you're stuck.