#authentication Prompts

Architect a secure User Management system. Use NextAuth.js for authentication (Google & GitHub providers) and Prisma with MongoDB for the database. Components needed: 1. 'Protected Route' wrapper using middleware. 2. Settings page to update profile (name, avatar, email). 3. Admin dashboard table lis...

Deploy and manage API gateways with rate limiting, authentication, and security controls for microservices architecture. API Gateway features: 1. Request routing: path-based routing, host headers, query parameters, weighted routing for A/B testing. 2. Protocol translation: REST to GraphQL, HTTP to g...

Implement JWT auth securely. Flow: 1. User login with credentials. 2. Server validates and creates JWT. 3. Client stores JWT (httpOnly cookie or memory). 4. Include JWT in Authorization header. 5. Server verifies signature and claims. 6. Refresh tokens for long sessions. 7. Token expiration and rene...

Explain the structure of a JSON Web Token (JWT). What are the three parts (Header, Payload, Signature)? What information is typically stored in the payload? How is the signature used to verify the token's authenticity? Provide an example of a decoded JWT payload.

Integrate social login with OAuth 2.0. Flow: 1. Redirect to provider (Google, Facebook, GitHub). 2. User authorizes application. 3. Provider redirects with authorization code. 4. Exchange code for access token. 5. Fetch user profile. 6. Create or update user in database. 7. Issue JWT to client. 8. H...

Create a secure password reset process. Workflow: 1. Verify customer identity (email, phone, security questions). 2. Explain reset process clearly. 3. Send secure reset link with expiration. 4. Provide alternative methods if email inaccessible. 5. Guide through creating strong password. 6. Confirm s...