Software Engineering

User Authentication

Sessions and tokens, OAuth and social login, password handling, reset and two-factor flows, authorization patterns, and the frontend half that most tutorials leave out.

The course project

The Secured Application

Full authentication and authorization, with a written threat model and a set of tests for the rules that matter.

course

6 modules · 12 lessons

Each module ends with a practice test, a graded build, and a step of the course project.

Part I: Foundations

Identity and Permission

Two different questions, and the second one is where projects fail.

Passwords

The one thing you must never implement yourself.

Section project · coming soon

Hash and Verify

Store passwords safely and verify them.

Part II: Mechanisms

Sessions and Tokens

Where the credential lives, and what each choice costs.

OAuth and Social Login

Signing in with somebody else's account system.

Section project · coming soon

Sessions and Tokens

Implement login with a session and understand what it protects.

Part III: The Client

Authentication on the Frontend

The half almost no tutorial covers.

Threat Modeling

Thinking about it on purpose, once, before it matters.

Section project · coming soon

Permission Rules

Write and test who may do what in an app.

All courses