Web Security Dev Academy - 12-week online program
Master the full scope of web security and learn to develop secure full-stack applications with reliable authorization, protection against vulnerabilities, and modern protocols such as OAuth and OIDC.
Read more about the course
What you will receive:
- A complete understanding of web application security models - from theory to practice
- Knowledge of typical vulnerabilities and methods to prevent them at industry standards level
- Skills in designing and implementing a secure role-based access model in a real full-stack application
- Understanding and ability to securely implement OAuth/OIDC flows for different scenarios
Who the course is suitable for:
- Full-stack developers looking to enhance their security skills
- Frontend developers concerned with client-side application security
- Backend developers striving for secure server logic architecture
- Application security engineers wanting a deeper understanding of practical implementation
- System administrators interested in security from a code perspective
Who the course is not suitable for:
- Those unfamiliar with JavaScript and HTML
- Beginners with no experience in web development
- Those looking for foundational IT or network security knowledge
- Developers focused on design and UX
You will learn to:
- Develop secure web applications, not blindly relying on frameworks
- See security as a comprehensive task, covering both frontend and backend
- Integrate security into the daily development process
- Apply practices that truly work in real-world conditions
Practical project:
You will secure a full-fledged personal expense tracking application consisting of modules: authorization, dashboard, expenses, settings, and admin panel. The key focus is on implementing a role-based access control (RBAC) model and incorporating modern security mechanisms on both client and server sides.
Main stack: Angular and Node.js with TypeScript, however, the first 5 modules of the course are technologically neutral, allowing you to adapt the knowledge to any stack.
Watch Online Web Security Dev Academy - 12-week online program
# | Title | Duration |
---|---|---|
1 | Welcome lesson | 01:34 |
2 | Program structure and topics | 03:06 |
3 | Training outcomes | 02:11 |
4 | What you need | 02:03 |
5 | Your first task | 01:13 |
6 | Welcome lesson | 00:39 |
7 | Same-origin policy | 06:29 |
8 | Cross-origin resource sharing | 02:37 |
9 | Same-origin policy [LABS] | 07:34 |
10 | Cross-origin resource sharing [LABS] | 03:11 |
11 | Content Security Policy | 07:11 |
12 | Content Security Policy [LABS] | 22:54 |
13 | Content Security Policy - Reporting [LABS] | 02:45 |
14 | Subresource Integrity [LABS] | 03:16 |
15 | Homework | 00:59 |
16 | Welcome lesson | 00:33 |
17 | Client-side security boundaries | 09:23 |
18 | Server-side security | 09:13 |
19 | HTTPS | 06:02 |
20 | Sessions vs. Tokens | 17:21 |
21 | When to use Sessions vs. JWT Tokens | 05:52 |
22 | Homework | 02:08 |
23 | Welcome lesson | 01:01 |
24 | OWASP Top 10 | 20:22 |
25 | Cross-site scripting | 11:17 |
26 | Cross-site scripting [LABS] | 15:49 |
27 | Cross-site request forgery | 10:15 |
28 | Cross-site request forgery [LABS] | 18:44 |
29 | JWT Hacking | 14:33 |
30 | Other security vulnerabilities | 01:51 |
31 | Welcome lesson | 00:19 |
32 | Application overview | 10:59 |
33 | Application presentation | 03:04 |
34 | Application architecture | 10:09 |
35 | Authentication vs. authorization | 07:23 |
36 | Secured Angular part | 07:55 |
37 | Secured API | 10:19 |
38 | Node.js application setup | 03:37 |
39 | Homework | 01:48 |
40 | Welcome lesson | 01:00 |
41 | Features overview | 13:54 |
42 | Login feature [Angular] | 14:00 |
43 | Login feature [Node] | 19:47 |
44 | Sign up feature [Angular] | 05:23 |
45 | Sign up feature [Node] | 15:01 |
46 | Router Guards | 05:42 |
47 | Http Interceptors | 08:09 |
48 | Homework | 01:16 |
49 | Welcome lesson | 00:33 |
50 | XSS prevention | 11:01 |
51 | CSRF prevention | 12:39 |
52 | HttpOnly and Secure Cookies | 02:06 |
53 | UserAuth object | 06:27 |
54 | Conditional components visibility | 08:55 |
55 | Homework | 01:00 |
56 | Welcome lesson | 00:59 |
57 | UserAuth object | 04:45 |
58 | Server-side session | 03:11 |
59 | Logging access and application events | 23:25 |
60 | Throttling failed logins | 13:29 |
61 | Input sanitization and validation | 12:25 |
62 | Preventing calls without the proper role | 07:08 |
63 | Preventing calls without the ownership | 03:23 |
64 | Setting up CORS | 02:42 |
65 | Homework | 01:35 |
66 | Welcome lesson | 01:06 |
67 | Adding a new user to account [Angular] | 16:13 |
68 | Adding a new user to account [Node] | 13:06 |
69 | Confirming a new user for account [Angular] | 05:00 |
70 | Confirming a new user for account [Node] | 01:41 |
71 | Password recovery | 11:49 |
72 | Managing active sessions | 13:40 |
73 | Welcome lesson | 02:06 |
74 | Introduction to OAuth 2.0 | 09:59 |
75 | Different client types and suitable OAuth flows | 18:51 |
76 | Security measures in OAuth | 09:43 |
77 | PKCE | 08:52 |
78 | OpenID Connect | 11:48 |
79 | Id Token with Implicit flow | 03:40 |
80 | Id Token with Implicit flow [CODE] | 09:54 |
81 | Authorization Code flow [CODE] | 25:33 |
82 | OAuth/OIDC Homework | 03:38 |
83 | Multi-factor authentication introduction | 12:07 |
84 | Two-factor authentication demo | 02:51 |
85 | Requesting OTP [Angular] | 09:46 |
86 | Validating OTP [Node] | 08:36 |
87 | 2FA settings [Angular] | 05:19 |
88 | 2FA settings [Node] | 04:14 |
89 | External user management introduction | 18:23 |
90 | Budget and Auth0 integration presentation | 01:59 |
91 | Auth0 integration [Angular] | 03:08 |
92 | Auth0 integration [Node] | 13:59 |
93 | Homework | 00:54 |
94 | Intro | 01:19 |
95 | Getting started | 05:10 |
96 | Basic match | 03:20 |
97 | Basic allow | 02:17 |
98 | Basic conditions | 03:33 |
99 | Common examples | 05:31 |
100 | Functions | 04:30 |
101 | Read other documents | 03:58 |
102 | Chat example | 04:49 |
103 | Role-based auth example | 05:44 |
104 | Security testing introduction | 02:49 |
105 | Setting up mock Firestore | 04:01 |
106 | Unit testing with mock data | 03:59 |
107 | Debugging security rules | 02:05 |
108 | Welcome lesson | 03:05 |
109 | Personal data introduction | 21:21 |
110 | Privacy Policy | 21:38 |
111 | Terms and Conditions | 02:52 |
112 | GDPR and regulations in the World | 13:55 |
113 | Cookies | 15:10 |
114 | Summary | 05:43 |
115 | Introduction | 02:53 |
116 | Same-origin Policy | 02:02 |
117 | User authentication | 03:35 |
118 | Origin spoofing | 01:40 |
119 | Input validation | 03:22 |
120 | TCP tunneling | 04:19 |
121 | Denial of Service (DoS) | 02:10 |
122 | WSS Encryption | 00:59 |
123 | Simple WebSocket demo [LABS] | 05:03 |
124 | Content Security Policy [LABS] | 02:25 |
125 | Authentication [LABS] | 08:55 |
126 | Cross-site WebSocket hijacking [LABS] | 02:23 |
127 | Goodbye and kind request | 01:41 |
128 | LIVE: Module 3 @ 20/06/2024 | 36:24 |
129 | Secure Serverless Devlopment @ Marek Sottl | 01:07:11 |
Similar courses to Web Security Dev Academy - 12-week online program

Streaming Databasesoreillymedia

Build Telegram Bots with JavaScript: The Complete Guideudemy

Uber Clone - Typescript, NodeJS, GraphQL, React, ApolloNomad Coders

Understanding Node.js: Core Conceptsudemy

Zero to Full Stack Heropapareact.com

Code With Antonio WorkshopsCode With Antonio
