Authentication & Authorization

Estimated Time: 20 hours

Status: ☐ Not Started

🎯 Objectives

• Understand the difference between authentication (who are you?) and authorization (what can you access?)
• Implement secure login systems using JWT (JSON Web Tokens)
• Hash and store passwords securely using bcrypt
• Protect routes and restrict access to certain users
• Store tokens client-side and use them for session control

🔗 Resources

1. JWT.io – Introduction to JSON Web Tokens

2. Net Ninja – Node.js Auth Tutorial (JWT) Playlist

   Full step-by-step playlist covering registration, login, JWTs, protected routes, logout, and more

3. Net Ninja GitHub – Auth Project Source Code

   Full example codebase from the playlist above

4. bcrypt.js GitHub Docs

5. ✅ The Odin Project – Only These Lessons:

   • Authentication Basics
   • Hashing Passwords with Bcrypt
   • JWT Authentication
   • Project: Auth System

✅ Projects

• [ ] Secure Login System
  • Register: hash and save user password
  • Login: verify password, issue JWT
  • Protected route: require token to access /dashboard or /profile