Authentication and Authorization Setup with Okta

Подписаться 7 тыс.

Просмотров 44 тыс.

50% 1

We will look at how to use Okta, a third-party identity provider to set up our authentication and authorization flow.
We will be using react for the frontend single-page application. We will also set up a protected API in Node using Express and Typescript.
We will also look at how to create these applications using the Okta developer portal and how to configure our projects with the correct values so that we are able to have a complete authentication and authorization flow.
Starter project to follow along: github.com/leoroese/node-okta...
Complete project: github.com/leoroese/node-okta...
Timestamps:
0:00 Intro
1:00 Create Okta Account and apps
4:00 SPA config
24:00 Web Server config

Опубликовано:

4 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 29

@juanpazmino8645 2 года назад

This is amazing!! The best video ever!! You saved my life bro!! Thank you!! :)

@himanshushekhar3694 2 года назад

terrific video...Thanks so much

@palashagrawal4277 Год назад

Great Tutorial!! i just wanted to know where we are using client and secret in webserver? because we defined the same in env but i don't see if we are using it.

@uzochukwuamarabenneth2583 2 года назад

Awesome tutorial!!!

@CodeDunks 2 года назад

Thank you!

@RezaulKarim-bl8gr 2 года назад

Thank you so much.

@CodeDunks 2 года назад

No worries!

@alanthomasgramont Год назад

Where is the magical post you keep referring to? For some reason I'm not able to find it in your documentation.

@abhishekshenoy7638 2 года назад

I need a help.. I am getting CORS error when I try to test the client part .. something like preflight not allowed for localhost:3000. Could u pls guide

@poornaathreya 2 года назад

Thank you! I was wondering how you can fix that redirect callback? When you logIn without already being authenticated (at 32:50), it redirects to your Okta dashboard instead of /profile. How do we fix that?

@georcecostanza 10 месяцев назад

You just neeed to provide a signin url to Okta. Idk why he configured his that way and then tried to play it off like it was normal lmao

@Chevindu 2 года назад

Hey, thanks for the clear video. Small issue: I cannot seem to access your blog. Is the server down, or the domain expired? Thanks.

@CodeDunks 2 года назад

Im currently in the process of rebuilding it, forgot to take the link off haha. Thanks for letting me know!

@tammycollinse1417 10 месяцев назад

Hi all, not sure if I will have any luck with this but I am trying to add a flask api authorization (also using okta) with an existing react app that has spa authentication with okta. Is this possible? Any help would be greatly appreciated!

@justdvl Год назад

Thanks

@arthurmorgan332 Год назад

👌👍

@AdeshSinghchandel 4 месяца назад

Can you help me i try to integrate okta openid auth with private public key how can i do that , when using in react getting error 401 in both react and node js can you guide me usign public key and private key with react and node js i am stuck and no correct documents found

@GetItYND-channel 2 года назад

Any example for okta+sso,+saml+go

@geraldomacias7243 2 года назад

Bummed so much has changed in react-router-dom v6 :(

@ABUTAHER-wg7gz Год назад

hello dear, How can i use SecureRoute in reactrouter 6

@stevereid636 Год назад

Is the blog post you mentioned back online yet?🙏🏾

@CodeDunks Год назад

It should be back up soon! Almost done with the rebuilding of it! My apologies

@sahilroyal8939 2 года назад

Implicit grant flow should be used for single page allications instead of Authorization code grant flow.

@CodeDunks 2 года назад

Just curious where you got this information? Implicit grant flow is a little bit less secure I believe than the Auth code grant flow. Also due to plans for removing third party cookies from browsers auth code is preferred. Here is Microsoft's documentation last updated end of August. docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

@bricejoosten5173 2 года назад

@@CodeDunks Okta themselves teach about implicit flows for SPA and native mobile (native mobile having PKCE too)

@georcecostanza 10 месяцев назад

@@bricejoosten5173 - You are incorrect brother. Implicit grant is much less secure. Okta state it in their own docs.

@gabrielhenton7346 2 года назад

Everything works for me EXCEPT the Call api button. I triple checked everything but no luck. Any advice?

@shannonm4238 2 года назад

I've followed this tutorial to a T and still cannot get the call api button to show anything but unauthorized/401 when I try to hit the protected route from my frontend.