ERRORS IN WORK WITH WEB SYSTEMS AUTHENTICATION

Authors

  • Podtopa Serhii National Technical University of Ukraine "Igor Sikorsky Kyiv Polytechnic Institute", Ukraine

Keywords:

data protection, JavaScript, web-application, authentication

Abstract

The paper deals with the issues the major errors of beginning and experienced web-developers when working with authentication systems. The bugs discussed are relevant to all programming languages, although the paper deals focuses on the language of JavaScript and its libraries.

Key words: authentication, web-application, JavaScript, data protection

Bibl.: 13.

References

Passport. Simple, unobtrusive authentication for Node.js. [Електронний ресурс]. — Режим доступу: http://www.passportjs.org/docs/

Michael Herman. User Authentication with Passport and Express 4. [Електронний ресурс]. — Режим доступу: http://mherman.org/blog/2015/01/31/local-authentication-with-passport-and-express-4/

Chris Sevilleja. Easy Node Authentication: Setup and Local. [Електронний ресурс]. — Режим доступу: https://scotch.io/tutorials/easy-node-authentication-setup-and-local

Substack. Middleware for managing password reset emails. [Електронний ресурс]. — Режим доступу: https://npmjs.com/package/password-reset/

Sahat Yalkabov. How To Implement Password Reset In Node.js. [Електронний ресурс]. — Режим доступу: http://sahatyalkabov.com/how-to-implement-password-reset-in-nodejs/

Soni Pandey. User Authentication using JWT (JSON Web Token) in Node.js. [Електронний ресурс]. — Режим доступу: https://medium.com/@pandeysoni/user-authentication-using-jwt-json-web-token-in-node-js-using-express-framework-543151a38ea1/

Is regular CTR mode vulnerable to any attacks? [Електронний ресурс]. — Режим доступу: https://crypto.stackexchange.com/questions/33846/is-regular-ctr-mode-vulnerable-to-any-attacks/33861#33861

JonathanMH. About Express, Passport and JSON Web Token Authentication for Beginners. [Електронний ресурс]. — Режим доступу: https://jonathanmh.com/express-passport-json-web-token-jwt-authentication-beginners/

Joshua Slate. Creating a Simple Node/Express API Authentication System with Passport and JWT. [Електронний ресурс]. — Режим доступу: http://blog.slatepeak.com/creating-a-simple-node-express-api-authentication-system-with-passport-and-jwt/

Express Rate Limit. [Електронний ресурс]. — Режим доступу: https://npmjs.com/package/express-rate-limit/

Express limiter. [Електронний ресурс]. — Режим доступу: https://npmjs.com/package/express-limiter/

Adam Pflug. Express-brute. [Електронний ресурс]. — Режим доступу: https://github.com/AdamPflug/express-brute

Your Node.js authentication tutorial is (probably) wrong. [Електронний ресурс]. — Режим доступу: https://hackernoon.com/your-node-js-authentication-tutorial-is-wrong-f1a3bf831a46/

Published

2023-11-08

Issue

Section

Security, Fault Tolerance