Authentication & Security

Build secure applications from the ground up. You'll learn password hashing, JWT authentication, input validation, SQL injection prevention, CORS, rate limiting, and role-based access control. Follow the ideas in small steps: first understand the concept, then practice it in the browser, and finally connect it to a realistic coding problem. Each lesson builds on the previous one so the track becomes a skill you can explain and use, not just a list of terms.

180 interactive lessons across 6 units · 36+ hours · intermediate level

What you will learn

Build practical skills in Security, JWT, Authentication, Express through browser-based coding exercises, guided feedback, unit quizzes, a debugging challenge, and a final project.

Course access

Unit 1, including its first 30 lessons and unit quiz, is free. The remaining 5 units require a CodeLearning365 Pro subscription.

View Pro access options

Authentication & Security curriculum

The curriculum progresses from foundations to applied practice and mastery. Representative topics from every unit are listed below.

Unit 1: Foundations

30 lessons covering topics such as Why Security Matters, Password Hashing, Salts and Constant-Time Comparison, JWT Structure, Signing and Verifying JWTs.

Why Security Matters
Password Hashing
Salts and Constant-Time Comparison
JWT Structure
Signing and Verifying JWTs

Unit 2: Core Concepts

30 lessons covering topics such as Power Up 031: Refresh Tokens, Power Up 032: OAuth 2.0 Concepts, Power Up 033: Session Management, Power Up 034: CSRF Protection, Power Up 035: Secrets and Environment Variables.

Power Up 031: Refresh Tokens
Power Up 032: OAuth 2.0 Concepts
Power Up 033: Session Management
Power Up 034: CSRF Protection
Power Up 035: Secrets and Environment Variables

Unit 3: Building Skills

30 lessons covering topics such as Power Up 061: Why Security Matters, Power Up 062: Password Hashing, Power Up 063: Salts and Constant-Time Comparison, Power Up 064: JWT Structure, Power Up 065: Signing and Verifying JWTs.

Power Up 061: Why Security Matters
Power Up 062: Password Hashing
Power Up 063: Salts and Constant-Time Comparison
Power Up 064: JWT Structure
Power Up 065: Signing and Verifying JWTs

Unit 4: Applied Practice

30 lessons covering topics such as Power Up 091: Refresh Tokens, Power Up 092: OAuth 2.0 Concepts, Power Up 093: Session Management, Power Up 094: CSRF Protection, Power Up 095: Secrets and Environment Variables.

Power Up 091: Refresh Tokens
Power Up 092: OAuth 2.0 Concepts
Power Up 093: Session Management
Power Up 094: CSRF Protection
Power Up 095: Secrets and Environment Variables

Unit 5: Projects

30 lessons covering topics such as Power Up 121: Why Security Matters, Power Up 122: Password Hashing, Power Up 123: Salts and Constant-Time Comparison, Power Up 124: JWT Structure, Power Up 125: Signing and Verifying JWTs.

Power Up 121: Why Security Matters
Power Up 122: Password Hashing
Power Up 123: Salts and Constant-Time Comparison
Power Up 124: JWT Structure
Power Up 125: Signing and Verifying JWTs

Unit 6: Mastery

30 lessons covering topics such as Power Up 151: Refresh Tokens, Power Up 152: OAuth 2.0 Concepts, Power Up 153: Session Management, Power Up 154: CSRF Protection, Power Up 155: Secrets and Environment Variables.

Power Up 151: Refresh Tokens
Power Up 152: OAuth 2.0 Concepts
Power Up 153: Session Management
Power Up 154: CSRF Protection
Power Up 155: Secrets and Environment Variables

Continue learning with a related course

Authentication & Security in TypeScript coding course — Implement secure authentication systems with TypeScript. Type JWTs, model session shapes, build typed middleware guards, and enforce security invariants through JSDoc types. Follow the ideas in small steps: first understand the concept, then practice it in the browser, and finally connect it to a realistic coding problem. Each lesson builds on the previous one so the track becomes a skill you can explain and use, not just a list of terms.
Backend in JavaScript coding course — Go from zero to building real REST APIs. You'll learn Node.js, async programming, file I/O, HTTP servers, and Express — writing real code that runs on a real server. Follow the ideas in small steps: first understand the concept, then practice it in the browser, and finally connect it to a realistic coding problem. Each lesson builds on the previous one so the track becomes a skill you can explain and use, not just a list of terms.
Backend in TypeScript coding course — Build production-ready Node.js and Express servers using TypeScript. Type request bodies, response shapes, middleware, and CRUD APIs — writing safer backend code from day one. Follow the ideas in small steps: first understand the concept, then practice it in the browser, and finally connect it to a realistic coding problem. Each lesson builds on the previous one so the track becomes a skill you can explain and use, not just a list of terms.

Compare all coding tracks