Mastering Authentication in Nodejs: JWT, SSO, Token based

Name: Mastering Authentication in Nodejs: JWT, SSO, Token based
Rating: 4.9 (38 reviews)

Build Secure Authentication Systems in NestJS with JWT, OAuth, and SSO

Highest Rated

Created byTarun (tkssharma) Sharma

Last updated 5/2026

English

What you'll learn

Authentication & Authorization Fundamentals
Implementing Secure Authentication in Node.js
JWT-Based Authentication (Stateless)
Session-Based Authentication (Stateful)
Single Sign-On (SSO) with SAML & OpenID Connect
API Key Authentication & Microservices Security
OAuth2 & Social Login and Auth0 Okta

Course content

8 sections • 72 lectures • 7h 40m total length

Authentication All in One SSO SAML | OIDC | Token Based - Course Agenda4:59
This course provides a complete, hands-on guide to mastering authentication systems in modern applications. Students will learn how to implement Single Sign-On (SSO) with SAML, secure authentication with OpenID Connect (OIDC), and scalable token-based authentication using JWTs. The course is designed to give developers a deep understanding of how different authentication standards work, how they are used in real-world systems, and how to integrate them securely into backend services built with frameworks like NestJS.
Through a combination of lectures, real-world projects, and practical examples, students will gain the skills needed to build, troubleshoot, and deploy production-ready authentication solutions.
Core principles of authentication and authorization
How SAML-based SSO works and how to integrate it with enterprise identity providers
How OpenID Connect extends OAuth 2.0 for modern identity management
How to implement token-based authentication using JWTs (access and refresh tokens)
The differences between SAML, OAuth, and OIDC, and when to use each
Best practices for securing authentication flows and protecting sensitive data
How to build a multi-strategy authentication system combining SAML, OIDC, and JWT
How to integrate authentication with cloud identity providers like Okta, Azure AD, and Keycloak
Common security vulnerabilities and how to defend against them
Type of different Authentication and Authorisation platforms3:55
Authentication and authorization are critical parts of any modern web or enterprise application. Today, there are a variety of platforms available that specialize in managing user identity, access control, and security. These platforms simplify the implementation of complex authentication mechanisms such as Single Sign-On (SSO), social login, multi-factor authentication (MFA), role-based access control (RBAC), and more.
Different Authentication and Authorisation platforms3:34

What is authentication & authorization?4:27
What Students Will Learn:
Understand what authentication means and its role in verifying user identity.
Understand what authorization means and its role in granting or restricting access to resources.
Learn the key difference between authentication ("Who are you?") and authorization ("What are you allowed to do?").
See real-world examples of authentication (login) and authorization (access control).
Understand how authentication and authorization work together to protect applications.
Recognize why both processes are essential for security in modern web development.
Build a strong conceptual foundation for implementing authentication and authorization throughout the course.
Understanding stateful vs. stateless authentication3:51
What Students Will Learn:
Stateful Authentication:
Server stores session data.
Session ID sent with each request.
Easier to manage sessions and user data on the server.
Stateless Authentication:
Server doesn’t store session data.
Client stores authentication token (e.g., JWT).
Tokens are self-contained, no server-side storage needed.
Stateful:
Pros: Simple to manage, direct control over sessions.
Cons: Less scalable, depends on server storage (e.g., memory or database).
Stateless:
Pros: Highly scalable, suitable for microservices and distributed systems.
Cons: More complex token management, risks like token theft.
Understand the major types of authentication methods used in web Apps5:34
What Students Will Learn:
Understand the major types of authentication methods used in web and mobile applications.
Learn how session-based authentication works and when to use it.
Learn how cookie-based authentication secures client-server communication.
Understand token-based authentication, especially using JWTs.
Understand OAuth 2.0 and OpenID Connect for third-party logins and identity management.
Explore how SAML-based SSO is used in enterprise authentication systems.
Learn about API key authentication for service-to-service communication.
Understand the role of biometric authentication in modern apps.
Learn the importance of multi-factor authentication (MFA) for improving security.
Be able to compare different methods and choose the right one based on project requirements.
Setting up a NestJS project with TypeScript4:07
What Students Will Learn:
How to set up a new NestJS project using the NestJS CLI.
How to configure TypeScript for optimal NestJS development.
How to install and configure essential dependencies for authentication (e.g., Passport.js, JWT).
Set up and configure session management with express-session and connect-redis.
How to implement cookie-based authentication in a NestJS application.
How to configure JWT authentication in NestJS using Passport and JWT strategies.
Auth Types in Real world Session, Cookies and Token based15:46
Auth Types in Real world OAuth, SSO, SAML OIDC12:15

What is Session Based Authentication and How it Works9:41
Setting Up Docker Compose for PostgreSQL and Redis8:44
In this section, students will learn how to set up and configure PostgreSQL and Redis databases using Docker Compose. They will understand the importance of containerizing services for local development and testing authentication systems.
Students will:
Learn the basics of Docker and Docker Compose for multi-service environments.
Create a docker-compose.yml file to define services for PostgreSQL and Redis.
Configure environment variables for database usernames, passwords, ports, and volumes.
Connect their NestJS application to PostgreSQL for user data storage.
Connect their NestJS session management to Redis for efficient session storage.
Connecting to Database Using NestJS and TypeORM3:20
What Students Will Learn:
Understand how to set up a database connection in NestJS using TypeORM.
Install and configure necessary TypeORM and PostgreSQL packages.
Create a TypeORM configuration module using environment variables for security.
Understand how to define and map Entities (tables) using TypeORM decorators.
Set up database migrations to create and update tables automatically.
Handle database connection errors gracefully within the NestJS application.
Looking into Docker Desktop, Containers, Volumes, and Port Mapping1:37
What Students Will Learn:
Understand what Docker Desktop is and how it manages local containers.
Learn how containers run isolated applications and services.
Explore how Docker images are used to create running containers.
Understand the purpose of Docker volumes for persistent data storage.
NestJS TypeORM Module: Static Initialisation and Dynamic Initialisation7:48
What Students Will Learn:
Understand what static initialization of the TypeORM module means.
Learn how to set up a fixed (static) database configuration using TypeOrmModule.forRoot().
Understand when static setup is sufficient (simple applications, no environment changes).
Learn what dynamic initialization means with TypeOrmModule.forRootAsync().
Configure the database dynamically using environment variables and a custom configuration service.
NestJS Redis Integration with Service and Module4:01
What Students Will Learn:
Understand what Redis is and how it works as an in-memory data store.
Learn use cases for Redis in NestJS, such as session storage, caching, and rate limiting.
Install and configure Redis client libraries like ioredis or redis.
Set up a Redis service/module in NestJS for centralized access across the app.
Learn how to use Redis with session-based authentication (e.g., with connect-redis).
NestJS User Module: Creating User Signup Controller and Service9:39
Adding Auth Module with Passport and Auth Strategies in NestJS6:08
What Students Will Learn:
How to generate an Auth module using the NestJS CLI.
Understand the role of Passport.js in handling authentication in NestJS.
Install and configure necessary packages: @nestjs/passport and passport.
Implement a basic local authentication strategy (e.g., username and password).
Create an AuthService to validate users and handle login logic.
NestJS + TypeORM User Login and Express Session with Redis4:44
NestJS Auth Guard with Passport User Session2:35
What Students Will Learn:
Understand what Auth Guards are in NestJS and how they work.
Learn how to use built-in guards like AuthGuard('local') or AuthGuard('jwt').
Implement a custom AuthGuard to protect routes based on user authentication.
Use guards to restrict access to authenticated users only.
Learn how guards interact with Passport strategies and request objects.
[DEMO] Nest js Express based session with and without Redis9:28
What Students Will Learn:
Session Management Without Redis:
How to set up express-session for session management in NestJS.
Store sessions in memory (default session store) for local development.
Understand the limitations of memory-based session storage (e.g., server restarts, scaling issues).
Implement login and logout functionality using in-memory sessions.
Learn how session data is stored and accessed using cookies.
Session Management With Redis:
How to integrate Redis for session storage in NestJS using connect-redis.
Set up Redis to persist session data across server restarts and scale horizontally.
Understand how Redis improves performance for session management.
Implement login functionality where session data is stored in Redis.
Learn how to configure Redis for secure, persistent session handling.

What is Cookies Based Auth and How to Secure Cookies8:32
NestJS Authentication – What Are Cookies in Web Authentication? #014:37
NestJS Authentication – Securely Sending Cookies to the Browser #023:25
NestJS Authentication – NestJS Application Setup and Folder Structure #033:01
NestJS Authentication – Bootstrapping a NestJS App from Scratch #042:58
NestJS Authentication – Setting Up Docker Containers for NestJS #053:08
NestJS Authentication – Cookies vs Sessions – What's the Difference? #063:01
NestJS Authentication – Using JWT Tokens in Cookies for Authentication #072:11
NestJS Authentication – Adding a Database Module with TypeORM #086:50
NestJS Authentication – TypeORM Data Synchronization Explained #093:56
NestJS Authentication – Creating Entity and Service Layers in NestJS #105:49
NestJS Authentication – Building APIs Using TypeORM Repository Pattern #114:23
NestJS Authentication – Auth Login and Signup Implementation #1210:00
NestJS Authentication – API Testing with Postman and Swagger UI #138:58
NestJS Authentication – Quick Recap of the Entire Flow #147:50

NestJS Token Based Auth – What is Token Based Auth #01.mp45:08
NestJS Token Based Auth – What is JWT Token #02.mp42:26
Nestjs Token Based Auth – Stateful and Stateless Auth #03.mp44:12
Nestjs How to Manage Token Expiry with Refresh Token8:40
NestJS Token Based Auth – Setting up NestJS App and Modules for Auth #04.mp42:56
Nestjs Token Based Auth – Updates Existing Code to Token Based Auth #05.mp45:52
NestJS Token Based Auth – Quick Recap and Demo #06.mp46:00
Complete Token based Auth end to end with nestjs with Demo Application28:33

Introduction to OAuth 2.01:21
What is OAuth 2.0 and Why Should We Use It?6:27
Real-World Examples of OAuth 2.0 in Action6:45
OAuth 2.0 Building Blocks and Flow Explained3:19
Implementing OAuth 2.0: Application Use Cases3:37
Understanding OAuth 2.0 Grant Types5:42
Simplified Walkthrough of the OAuth 2.0 Flow2:35
Creating an OAuth App in Google Developer Console4:59
OAuth Demo: Sign in with Google6:48
Complete Oauth Flow - Login with Google Nestjs13:53
OAuth Demo: Sign in with GitHub3:57
Full GitHub OAuth Integration Demo5:23

What is Auth0 || Introduction to OAuth 2.08:50
Why Do We Need Auth0 in Modern Authentication?4:51
Mastering Auth0 in Microservices – Introduction to Secure Auth9:25
Auth0 in 2 Minutes: Revolutionize Your App Security3:04
Authentication Explained in 5 Minutes With SPA React Applicatio – Why It Matters8:09
Auth0 Authorization in NestJS API – Step-by-Step Guide (Part 1)9:29
Auth0 Authorization in NestJS API – Step-by-Step Guide (Part 2)16:03
Auth0 Authorization in NestJS API – Step-by-Step Guide (Part 3)13:05
Next.js Authentication Made Easy – Integrating Auth0 Step-by-Step20:22

Introduction to SSO (Single Sign-On)4:17
SSO Explained with a Real-World Example3:20
Real-World SSO Examples and different real world use cases4:04
How SSO Works with SAML and Why we need it4:33
How SSO Works with SAML, XML based Auth Exchange2:53
Learn how saml exchanges xml based assertions from an identity provider to a service provider for authentication, and how oidc adds an id layer to oauth 2.0 using jwt tokens.
What is SAML Request and what it contains SAML Request and Response3:17
SSO Works with SAML and OIDC with IDP and SP3:28
SSO SAML Integration with Auth0 and without Auth0 as IDP and SP8:03

Requirements

Basic understanding of JavaScript & TypeScript
Familiarity with Node.js and Express.js
Understanding of asynchronous programming & promises in JavaScript
Familiarity with databases (MongoDB, PostgreSQL, or MySQL)

Description

Authentication is a critical part of any modern web application, ensuring that users can securely access resources while preventing unauthorized access. This course provides a comprehensive guide to authentication in Node.js, covering essential and advanced authentication techniques used in real-world applications.

You will learn how to implement secure authentication systems using JWT (JSON Web Token), OAuth2, SSO (Single Sign-On), API keys, and session-based authentication. The course focuses on best security practices, including password hashing, token expiration management, multi-factor authentication (MFA), and role-based access control (RBAC).

By the end of this course, you will have the skills to build and deploy a production-ready authentication system in Node.js using popular authentication strategies.

Authentication Methods You Will Learn

Session-based authentication (stateful, using cookies and sessions)
JWT-based authentication (stateless, using access and refresh tokens)
OAuth2 & Social Login (Google, Facebook, GitHub, Okta)
Single Sign-On (SSO) with SAML & OpenID Connect
Two-Factor Authentication (2FA) for added security
API key authentication for secure service-to-service communication
Best practices for securing authentication endpoints

This course is designed to equip you with in-depth knowledge of authentication in NestJS, covering both fundamental concepts and advanced security techniques. By the end of the course, you will have the skills to build scalable, secure authentication systems for real-world applications.

By the end of the course, you will have built a complete authentication system that is scalable, secure, and production-ready.

Who this course is for:

Node.js & Backend Developers
Security-Focused Engineers
Full-Stack Developers
Students & Beginners in Authentication Concepts

Mastering Authentication in Nodejs: JWT, SSO, Token based

What you'll learn

Explore related topics

Course content

Introduction to the course and Agenda3 lectures • 12min

What is authentication & authorization and Different Methods for Authentication6 lectures • 46min

Nestjs Authentication Service : Session-Based Authentication11 lectures • 1hr 8min

Nestjs Authentication Service : Cookies Based Authentication and security15 lectures • 1hr 19min

Nestjs Authentication Service : Token Based Authentication8 lectures • 1hr 4min

Mastering OAuth 2.0: From Fundamentals to Real-World Applications12 lectures • 1hr 5min

Hands-On OAuth 2.0 with Auth0: Setup, Flows, and Demos9 lectures • 1hr 33min

Introduction to SSO (Single Sign-On), SSO SAML and OIDC with Handson8 lectures • 34min

Requirements

Description

Who this course is for: