Passwordless Authentication Tutorial - Say Goodbye to Passwords

Рет қаралды 7,005

Күн бұрын

This video is sponsored by StepZen which is a GraphQL server with a unique architecture that helps developers build APIs fast and with less code (using declarative configurations).
❇️ Get your free account here: bit.ly/3QuD50e
In this tutorial, we'll dive deep into the world of passwordless authentication, revolutionising the user login experience. No more forgetting and resetting passwords! Learn how to implement a full authentication flow solely based on emails. Even if the user is a newbie or a returning visitor, this method automatically tailors the experience for them. We'll guide you through sending a one-time password (OTP) to the user's email using Amazon AWS SES, verifying it, and seamlessly authenticating them in the application. Ready? Let's get started🚀
Source code:
Backend: github.com/notJust-dev/Twitte...
Frontend: github.com/notJust-dev/Twitter
🔗 Links mentioned:
reactnavigation.org/docs/auth...
docs.expo.dev/router/referenc...
🔥 Build a Books App with React Native and GraphQL API ➡️ kzfaq.info-qAhg4EDIwQ
🔥 Build a StackOverflow Clone with React Native and GraphQL API ➡️ kzfaq.infoiwgp777Mi54
📰 Stay ahead with our newsletter for the latest tech in development:
www.notjust.dev/links
This video includes a lot of tools and technologies, providing an excellent opportunity to learn about:
- Implementing passwordless authentication with React Native.
- Integration of Amazon AWS's SES for secure email OTPs.
- Streamlining user experience with email-only logins.
- Best practices for AWS SES within a React Native environment.
- Advanced techniques for ensuring secure and seamless authentication flows.
📚 Enroll NOW in The Full-Stack Mobile Developer course and don’t miss out on your chance to become a 6-figure dev in 2023! Check out what our successful students are saying about their experience:
academy.notjust.dev/?...
💬 Join the notJust Development gang and let's build together:
Twitter: / vadimnotjustdev
Instagram: / vadimnotjus. .
Facebook: / notjustdev
LinkedIn: / vadimsavin
Discord: / discord
Timecodes:
0:00 Intro
0:27 The Authentication Flow
2:54 Stepzen
3:33 Adjusting and defining the database schema
8:33 Defining the authentication router, generating email tokens
18:03 Implementing the Authentication
19:11 Generating the Email Token
24:41 Validating the User in the Database
35:26 Restricting unauthenticated users from accessing the API; Assigning new objects to the user that is authenticating
55:16 Sending the token(OTP) to the user's email
1:12:58 Creating the User Interface for the paswordlessa authentication
1:15:00 User Interface for the Login Page
1:17:37 User Interface for the Authentication Page
1:22:12 Implementing the Backend requests
1:44:42 Making sure that the API is using the Auth Token from the context provider
1:51:59 Outro
Disclaimer: This build is for educational purposes only. All views, opinions, and technology choices expressed in this video are my own and do not represent the views, opinions, or technology choices of any entity I have been, am now, or will be affiliated with.
#notjustdev #passwordless #reactnative

Пікірлер: 12

@mistamiyaki 7 ай бұрын

This is just the process I was looking to implement. Thanks a lot. You are doing a great job and you are much appreciated.

@kay-in-the-kitchen 7 ай бұрын

Thank you! You are the best :)

@orikanner4873 7 ай бұрын

great vid, can you create one with lambda functions and cognito would be much easier to manage :)

@faysal1991 7 ай бұрын

awesome, thank you

@sdsim1 7 ай бұрын

Thank you 💌

@notjustdev 7 ай бұрын

You are so welcome

@igor5379 7 ай бұрын

Молодец, Вадим!

@matteoagius-darrigo5801 6 ай бұрын

Thanks for the great video. I am 1/3 way through. Your abstraction away from using the raw JWT token and instead creating a token in the database seems suboptimal. Adding a query to your middleware will be extremely un-performant. You should leverage just signing the JWT with a role like "user" and the "userID". I know this will break away from the ability for you to invalidate these JWT tokens individually, but that is what refresh tokens are for.