Next.js Tutorial - Part 6 | Authentication for API Routes using JWT and bcrypt

An explanation of the theory and implementation of building an authentication system in Next.js using JWT and bcrypt.

This video shows the Theory and Code needed to build an Authentication system. We use bcrypt and JWT tokens. We also go through the different strategies to store authentication tokens between different sessions, showing the possible issues with the different strategies. If you want to jump directly into code go to 20:45 ---- Repository: github.com/bmvantunes/youtube-2020-march-nextjs-part6 ---- Next.js Examples: github.com/zeit/next.js/tree/canary/examples ---- Slides available at: docs.google.com/presentation/d/15eM4oFshHCwvPDY0BRQGnn8JnVir… ---- All references about I used for this video: developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#Secure_and… cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Fo… stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5… developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#SameSite_c… en.wikipedia.org/wiki/Same-origin_policy owasp.org/www-community/attacks/xss/ scottbrady91.com/OAuth/OAuth-is-Not-Authentication letsencrypt.org/ tools.ietf.org/html/rfc7519 codahale.com/how-to-safely-store-a-password/ ---- Follow me on: Twitter: twitter.com/bmvantunes Dev.to: dev.to/bmvantunes Website: brunoantunes.net Github: github.com/bmvantunes LinkedIn: linkedin.com/in/bmvantunes