--- title: Best Authentication posts of 2022 | daily.dev description: The most upvoted Authentication posts of 2022, curated by the daily.dev community. canonical: https://daily.dev/tags/authentication/best-of/2022 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/authentication/best-of/2022 og:type: website og:site_name: daily.dev og:title: Best Authentication posts of 2022 | daily.dev og:description: The most upvoted Authentication posts of 2022, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Authentication — 2022 1. 1 [](/posts/authentication-just-got-easier--ienarqtza "Authentication just got easier!") Article daily.dev Changelog · 4y Authentication just got easier! Authentication just got easier! Now you can log in with Google, Facebook, Github, Apple or email. But wait, there is more! You can now connect multiple authentication providers. This is super useful if you are logged in with say Facebook on your phone but not on your PC. 496 55 2. 2 [](/posts/please-stop-using-local-storage-nvkjpsixv "Please Stop Using Local Storage") Article Community Picks · 4y Please Stop Using Local Storage Local storage is just one big old JavaScript object that you can attach data to (or remove data from) Local storage provides at least 5MB of data storage across all major web browsers. This is a fairly low limit for people building apps that are data intensive or need to function offline. If the app you're using doesn't fit the above description: don't use local storage. 287 22 3. 3 [](/posts/diagram-as-code-c1udvr6fx "Diagram as Code") Article ByteByteGo · 4y Diagram as Code 273 16 4. 4 [](/posts/creating-a-music-streaming-backend-like-spotify-using-mongodb-4aekw6jk8 "Creating a Music Streaming Backend Like Spotify Using MongoDB") Article Analytics Vidhya · 4y Creating a Music Streaming Backend Like Spotify Using MongoDB Creating a Music Streaming Backend like Spotify using MongoDB. This article was published as a part of the Data Science Blogathon. In this article, I will show you how to handle uploading songs to the database, streaming music, user authentication, the ability to choose your favorite songs, and a recommendation engine. We will add our code in a new file named ‘auth.ts’ in a new file.ts. 197 1 5. 5 [](/posts/11-authentication-mistakes-and-how-to-fix-them-kil1c-fx5 "11 Authentication Mistakes and how to fix them") Article asayer · 4y 11 Authentication Mistakes and how to fix them When authenticating a form on your web application, you must be careful not to display just one error message. Displaying a specific error message is dangerous because it could let an attacker use an automated trial-and-error method to determine a user’s username and password. Injection attacks, memory leaks, and compromised systems can occur if data provided in form input is not properly checked. All of the libraries I recommend for validation. 195 4 6. 6 [](/posts/how-to-authenticate-a-user-with-face-recognition-in-react-js-abomrxe7f "How to Authenticate a User with Face Recognition in React.js") Article freeCodeCamp · 4y How to Authenticate a User with Face Recognition in React.js In this tutorial, we'll discuss different authentication techniques you can use to authenticate users. These include email-password authentication, phone auth, OAuth, passwordless magic links, and at last facial authentication. We'll also build a project that teaches you how to integrate facial recognition-based authentication in your React web application Magic link authentication Magic links. 195 5 7. 7 [](/posts/appwrite---100-open-source-alternative-for-firebase-umop06zvi "Appwrite - 100% open source alternative for Firebase") Article Product Hunt · 4y Appwrite - 100% open source alternative for Firebase Appwrite provides authentication, database, storage, functions, and advanced realtime capabilities. 174 18 8. 8 [](/posts/sessions-vs-jwts---a-complete-guide-to-authentication-rvqyjbqib "Sessions vs JWTs - A Complete Guide to Authentication") Article Hashnode · 4y Sessions vs JWTs - A Complete Guide to Authentication Authentication or auth for short is the process where a server recognizes the identity of a user. Authorization is then done, to allocate a role to the authenticated user and allocate the required services to that particular user. There are 2 ways you can implement auth:Server-side sessions and JWTs. 168 12 9. 9 [](/posts/ep34-session-cookie-jwt-token-sso-and-oauth--iurijm82 "EP34: Session, cookie, JWT, token, SSO, and OAuth") Article ByteByteGo · 4y EP34: Session, cookie, JWT, token, SSO, and OAuth The Black Friday sale is now up! Use code BF2022 at checkout for 30% off my system design interview online course. This week’s system design refresher: System design interview course (Black Friday Sale) Token, Cookie, Session What is CDN? 166 5 10. 10 [](/posts/how-to-add-login-authentication-to-react-applications-kdxu9r-te "How To Add Login Authentication to React Applications") Article Community Picks · 4y How To Add Login Authentication to React Applications This tutorial was tested on Node.js version 10.22.0 and npm version 6.14.6\. The author selected Creative Commons to receive a donation as part of the Write for DOnations program. Many web applications are a mix of public and private pages. Public pages are available to anyone, while a private page requires a user login. 130 3 11. 11 [](/posts/json-web-token---guide-msrs3ktap "JSON Web Token - Guide") Article Hashnode · 4y JSON Web Token - Guide JSON Web Token (JWT) is a secure way to transmit information between parties as a JSON object. This information is trustworthy because it is digitally signed. Once the user is logged in, each subsequent request will include the JWT, allowing the user to access routes, services, and resources with that token. 108 3 12. 12 [](/posts/role-based-authorization-in-nodejs-ut5ipeo80 "Role-Based Authorization in NodeJs") Article Hashnode · 4y Role-Based Authorization in NodeJs Authentication and authorization in Express.js can be achieved easily using middleware functions. To make things easier we made available some starter files if you would like to code along. The finished version lies on the main branch while the starter files are on the starter branch. We made everything simple enough so just anyone whether a beginner or intermediate developer can follow along. 106 4 13. 13 [](/posts/ways-to-add-authentication-to-your-react-apps-9lalaylta "Ways to Add Authentication to Your React Apps") Article Code Like A Girl · 5y Ways to Add Authentication to Your React Apps Authentication is an integral part of any public-facing application. It is used to verify if the user on a platform is who they say they are. Several plugins, widgets, and apps are available for authenticating users on your React app. This article will look at two of these in detail: Frontegg and Okta. 103 6 14. 14 [](/posts/building-a-scalable-notification-service-zghziuwzk "Building a Scalable Notification Service") Article Quastor Daily · 4y Building a Scalable Notification Service Razorpay is one of India’s most valuable fintech startups. The company powers payments for over 8 million businesses in India and has been growing extremely quickly. With the increase in transactions, the Razorpay team encountered a few scalability issues - Database Bottleneck - Read query performance was getting worse and it couldn’t scale to meet the required input/output operations per second. 96 2 15. 15 [](/posts/how-to-authenticate-a-user-via-face-recognition-in-your-web-application-tymh6zuus "How to Authenticate a User via Face Recognition in Your Web Application") Article Hacker Noon · 4y How to Authenticate a User via Face Recognition in Your Web Application Authentication is a very crucial aspect of your web application. In the past, email password-based authentication was most popular and widely used. With the advancement of Artificial Intelligence (AI) and machine learning (ML), facial recognition techniques gain huge popularity. In this article, we are building a simple application to demonstrate how to authenticate a user using facial recognition. 94 3 16. 16 [](/posts/jwt-json-web-token--szcruqp7p "JWT (JSON Web Token)") Article DEV · 4y JWT (JSON Web Token) A JWT is used for authorisation and authorisation to make sure that the user that sends a request to your server is the same user that logged in during the authentication process. In JWT instead of cookies, it uses a JWT web token which is what it stands for. The server checks its memory that what the user app is for. 68 1 17. 17 [](/posts/attacks-on-json-web-token-jwt--8ilfogxq9 "Attacks on JSON Web Token (JWT)") Article InfoSec Write-ups · 5y Attacks on JSON Web Token (JWT) In this article, we will discuss the attacking part on JWT, which is the hacker’s favorite part. Abusing None algorithm is used to generate a JWToken. In that case, anyone can create a forge JWT Token and submit it to a resource server because there is no signature available in the token. 65 1 18. 18 [](/posts/hacking-jwt-awguinfhw "Hacking JWT") Article System Weakness · 5y Hacking JWT This article is all about pentesting JWT. You can practice all of these techniques on vulnerable target that I have designed(will publish shortly) I will try to make the article as easy to understand in very layman language. JWT is a token mechanism which is actually designed as a means of checking authorization. 64 19. 19 [](/posts/the-best-backend-as-a-service-for-your-react-app-u5uufe7gz "The Best Backend as a Service for your React App") Article freeCodeCamp · 4y The Best Backend as a Service for your React App Firebase has dominated the backend-as-a-service space for many years, but Supabase has emerged as a great alternative. Supabase allows you to take your code and deploy it wherever you like. You can build your app, deploy it to Supabase's servers, or you can Deploy it to your own hosting service. 60 2 20. 20 [](/posts/flowchart-of-how-slack-decides-to-send-a-notification-udcovyt1q "Flowchart of how slack decides to send a notification") Article ByteByteGo · 4y Flowchart of how slack decides to send a notification Slack has published 26 articles over the past two weekends to go through. In this newsletter, we will talk about the following:Flowchart of how slack decides to send a notification. Orchestration and choreography. How to design secure web API access for your website. How does Amazon build and operate software? 59 1 21. 21 [](/posts/what-is-cerbos---dr1l9-ky "What is Cerbos?") Article Cerbos · 4y What is Cerbos? Cerbos is an open source access control system that can handle all of your complicated business logic through simple configuration. It allows you to plug it into your existing stack as a decoupled service. It is completely stateless and distributed in binaries and containers that allow it to run in the cloud. 58 1 22. 22 [](/posts/authentication-with-jwt-for-your-website-rqrgdzb4u "Authentication with JWT for your website") Article asayer · 4y Authentication with JWT for your website JWT is a stateless authentication mechanism popularly used as a client-side stateless session. A JWT can be symmetrically signed by a shared secret using the HMAC algorithm. While SAML tokens can use public/private key pairs like JWTs like JWT, the signing algorithm could be HMAC SHA256 or RSA. JWT has some recommendations for JWT developers. For more information about JWT and the signing algorithms. The JWT will be available on the JWT to help users and other services. For example, you can find out how to use JWT in a website and use a JWT on a site and use the J WT on a website. The signature is created by taking the encoded header, the encoded payload, 58 23. 23 [](/posts/securing-microservices-with-oauth2-06ersymu8 "Securing Microservices with OAuth2") Article Ballerina · 5y Securing Microservices with OAuth2 This article explains how to secure your microservices deployment practically with OAuth2 using Ballerina programming language. Let’s see how to design, implement, test, deploy and observe the system. The complete example can be found at:https://ballerina.io/examples/order-management-service. 58 1 24. 24 [](/posts/how-to-build-a-smooth-authentication-flow-system-with-firebase-a56zb8n-g "How to Build a Smooth Authentication Flow System with Firebase") Article Hacker Noon · 4y How to Build a Smooth Authentication Flow System with Firebase An authentication service protects your website from unverified users having access to the website's features or contents. It ensures users' identity is genuine by verifying their credentials, which are usually the username/email and password. We've all experienced this on platforms such as Facebook, Instagram or Twitter when we are trying to sign into our accounts. 55 4 25. 25 [](/posts/authentication-vs-authorization-what-s-the-difference--xy-j-cis0 "Authentication vs Authorization – What's the Difference?") Article freeCodeCamp · 4y Authentication vs Authorization – What's the Difference? authentication is the process of verifying the credentials a user provides with those stored in a system to prove the user is who they say they are. You only need a single factor to authenticate, with the most common being a password. Authorization can either grant or deny permission to carry out tasks, or access areas of an application. 54 [See all Authentication archives](/tags/authentication/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/authentication/best-of/2022#page","url":"https://daily.dev/tags/authentication/best-of/2022","name":"Best Authentication Posts of 2022","description":"The most upvoted Authentication posts of 2022, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/authentication/best-of/2022#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/authentication-just-got-easier--ienarqtza","name":"Authentication just got easier!"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/please-stop-using-local-storage-nvkjpsixv","name":"Please Stop Using Local Storage"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/diagram-as-code-c1udvr6fx","name":"Diagram as Code"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/creating-a-music-streaming-backend-like-spotify-using-mongodb-4aekw6jk8","name":"Creating a Music Streaming Backend Like Spotify Using MongoDB"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/11-authentication-mistakes-and-how-to-fix-them-kil1c-fx5","name":"11 Authentication Mistakes and how to fix them"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/how-to-authenticate-a-user-with-face-recognition-in-react-js-abomrxe7f","name":"How to Authenticate a User with Face Recognition in React.js"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/appwrite---100-open-source-alternative-for-firebase-umop06zvi","name":"Appwrite - 100% open source alternative for Firebase"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/sessions-vs-jwts---a-complete-guide-to-authentication-rvqyjbqib","name":"Sessions vs JWTs - A Complete Guide to Authentication"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/ep34-session-cookie-jwt-token-sso-and-oauth--iurijm82","name":"EP34: Session, cookie, JWT, token, SSO, and OAuth"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/how-to-add-login-authentication-to-react-applications-kdxu9r-te","name":"How To Add Login Authentication to React Applications"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/json-web-token---guide-msrs3ktap","name":"JSON Web Token - Guide"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/role-based-authorization-in-nodejs-ut5ipeo80","name":"Role-Based Authorization in NodeJs"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/ways-to-add-authentication-to-your-react-apps-9lalaylta","name":"Ways to Add Authentication to Your React Apps"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/building-a-scalable-notification-service-zghziuwzk","name":"Building a Scalable Notification Service"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/how-to-authenticate-a-user-via-face-recognition-in-your-web-application-tymh6zuus","name":"How to Authenticate a User via Face Recognition in Your Web Application"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/jwt-json-web-token--szcruqp7p","name":"JWT (JSON Web Token)"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/attacks-on-json-web-token-jwt--8ilfogxq9","name":"Attacks on JSON Web Token (JWT)"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/hacking-jwt-awguinfhw","name":"Hacking JWT"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/the-best-backend-as-a-service-for-your-react-app-u5uufe7gz","name":"The Best Backend as a Service for your React App"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/flowchart-of-how-slack-decides-to-send-a-notification-udcovyt1q","name":"Flowchart of how slack decides to send a notification"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/what-is-cerbos---dr1l9-ky","name":"What is Cerbos?"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/authentication-with-jwt-for-your-website-rqrgdzb4u","name":"Authentication with JWT for your website"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/securing-microservices-with-oauth2-06ersymu8","name":"Securing Microservices with OAuth2"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/how-to-build-a-smooth-authentication-flow-system-with-firebase-a56zb8n-g","name":"How to Build a Smooth Authentication Flow System with Firebase"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/authentication-vs-authorization-what-s-the-difference--xy-j-cis0","name":"Authentication vs Authorization – What's the Difference?"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Authentication","item":"https://daily.dev/tags/authentication"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/authentication/best-of"},{"@type":"ListItem","position":5,"name":"2022"}]}]} ```