Week 7 - Refresh Tokens, Roles, and Session Hijacking

Application Security And Hardening

View Lecture Notes

Goals

Investigate the concept of Session Hijacking
Harden our API using Refresh Tokens and Safer Storage Options
Use Roles to protect our Data
Understand and Utilize CORS

Topics

Session Hijacking
Refresh Tokens
Roles and Access Levels
CORS

Applications

Week 07 - Insecure Blog App Part 6
- A work-in-progress blogging application with basic user authentication and authorization
- This week we've added authorization via cookies and tokens
Week 07 - Payload RX
- A special purpose app :)