Agenda
Module 1: The big plan
Available in
days
days
after you enroll
Module 2: Web Security Model
Available in
days
days
after you enroll
-
Welcome lesson
(0:38)
-
Same-origin policy
(6:28)
-
Cross-origin resource sharing
(2:36)
-
Same-origin policy [LABS]
(7:33)
-
Cross-origin resource sharing [LABS]
(3:10)
-
Content Security Policy
(7:10)
-
Content Security Policy [LABS]
(22:53)
-
Content Security Policy - Reporting [LABS]
(2:44)
-
Subresource Integrity [LABS]
(3:15)
-
Homework
(0:58)
-
Source code [LABS]
Module 3: Client vs. server security
Available in
days
days
after you enroll
Module 4: Security vulnerabilities
Available in
days
days
after you enroll
Module 5: Application architecture
Available in
days
days
after you enroll
Module 6: Core features implementation
Available in
days
days
after you enroll
Module 7: Client security implementation
Available in
days
days
after you enroll
Module 8: API security implementation
Available in
days
days
after you enroll
-
Welcome lesson
(0:58)
-
UserAuth object
(4:44)
-
Server-side session
(3:10)
-
Logging access and application events
(23:24)
-
Throttling failed logins
(13:28)
-
Input sanitization and validation
(12:24)
-
Preventing calls without the proper role
(7:07)
-
Preventing calls without the ownership
(3:22)
-
Setting up CORS
(2:41)
-
Homework
(1:34)
Module 9: Roles and account management
Available in
days
days
after you enroll
Module 10: External authentication
Available in
days
days
after you enroll
-
Welcome lesson
(2:05)
-
Introduction to OAuth 2.0
(9:58)
-
Different client types and suitable OAuth flows
(18:50)
-
Security measures in OAuth
(9:42)
-
PKCE
(8:51)
-
OpenID Connect
(11:47)
-
Id Token with Implicit flow
(3:39)
-
Id Token with Implicit flow [CODE]
(9:53)
-
Authorization Code flow [CODE]
(25:32)
-
OAuth/OIDC Homework
(3:37)
Module 11: Multi-factor authentication
Available in
days
days
after you enroll
Module 12: External user management
Available in
days
days
after you enroll
Bonus: Firebase Security
Available in
days
days
after you enroll
-
Intro
(1:18)
-
Getting started
(5:09)
-
Basic match
(3:19)
-
Basic allow
(2:16)
-
Basic conditions
(3:32)
-
Common examples
(5:30)
-
Functions
(4:29)
-
Read other documents
(3:57)
-
Chat example
(4:48)
-
Role-based auth example
(5:43)
-
Security testing introduction
(2:48)
-
Setting up mock Firestore
(4:00)
-
Unit testing with mock data
(3:58)
-
Debugging security rules
(2:04)
Bonus: GDPR and legal guidance
Available in
days
days
after you enroll
Final module (must watch)
Available in
days
days
after you enroll