--- title: Best Authentication posts of 2024 | daily.dev description: The most upvoted Authentication posts of 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/authentication/best-of/2024 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/authentication/best-of/2024 og:type: website og:site_name: daily.dev og:title: Best Authentication posts of 2024 | daily.dev og:description: The most upvoted Authentication posts of 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Authentication — 2024 1. 1 [](/posts/jwt-explained-in-4-minutes-with-visuals--298cbbsyf "JWT explained in 4 minutes (With Visuals)") Article DEV · 3y JWT explained in 4 minutes (With Visuals) Explanation of JWT authentication, its structure, advantages, and disadvantages. 427 11 2. 2 [](/posts/jwt-vs-paseto-new-era-of-token-based-authentication-to2objxxo "JWT vs PASETO: New Era of Token-Based Authentication") Article Community Picks · 2y JWT vs PASETO: New Era of Token-Based Authentication The post offers a detailed comparison between JWT (JSON Web Token) and PASETO (Platform-Agnostic Security Tokens), examining their core functionalities, security features, and potential vulnerabilities. While JWT is popular for its simplicity, PASETO addresses many of its security issues by enforcing safer defaults and mitigating algorithm confusion. The post covers the workflows of both token types, their structures, and key differences in their approach to security, making it a valuable read for developers looking to implement secure token-based authentication. 360 4 3. 3 [](/posts/session-based-vs-token-based-authentication-which-is-better--gu24tmoty "🔐 Session-Based vs. Token-Based Authentication: Which is better?🤔") Article Community Picks · 2y 🔐 Session-Based vs. Token-Based Authentication: Which is better?🤔 Learn about session-based and token-based authentication methods used in backend applications. Understand the implementation steps and the key differences between the two methods. 352 7 4. 4 [](/posts/better-auth-mlybduwgh "Better Auth") Article Community Picks · 2y Better Auth Supports popular frontend, backend, and meta frameworks like React, Vue, Svelte, and more. Provides secure email and password authentication, multiple OAuth providers for social sign-on, built-in two-factor authentication, and tools for managing user access. Extend functionality via official and community plugins. 301 8 5. 5 [](/posts/how-ssh-really-works-yllkl1rqi "How SSH Really Works") Video ByteByteGo · 2y How SSH Really Works SSH is essential for providing secure remote access over unsecured networks. This video explains how SSH creates a secure tunnel between client and server, focusing on SSH2, which offers improved security features compared to SSH1\. Key aspects covered include TCP connection establishment, version and algorithm negotiation, key exchange using the Elliptic Curve Diffie-Hellman method, and public key authentication. Once authenticated, all communication between the client and server is encrypted using a session key. SSH also supports local forwarding for tunneling other network services securely. 254 4 6. 6 [](/posts/oauth-2-0-flows-explained-in-gifs-beqiosycs "🔑 OAuth 2.0 flows explained in GIFs") Article Community Picks · 3y 🔑 OAuth 2.0 flows explained in GIFs This post explains OAuth 2.0 flows using GIFs. It covers the terminologies, the Authorization Code Grant flow, and other flows in OAuth 2.0. 247 5 7. 7 [](/posts/understanding-jwt-oauth-and-bearer-tokens-8cuqxswdw "Understanding JWT, OAuth, and Bearer tokens") Article LogRocket · 2y Understanding JWT, OAuth, and Bearer tokens In the digital world, authentication and authorization are essential for secure access to online services. JWTs (JSON Web Tokens), OAuth, and Bearer tokens play crucial roles in ensuring security. JWTs are tamper-proof tokens composed of three parts: header, payload, and signature, used for securely transmitting information. OAuth typically utilizes JWTs to transport user information securely. Bearer tokens, included in HTTP headers, authenticate users for accessing protected resources. Understanding these concepts helps improve web security. 244 5 8. 8 [](/posts/authentication-in-react-with-jwts-access-refresh-tokens-complete-tutorial--satb8ylax "Authentication in React with JWTs, Access & Refresh Tokens (Complete Tutorial)") Video Community Picks · 2y Authentication in React with JWTs, Access & Refresh Tokens (Complete Tutorial) This post explains the importance of authentication in a React application and how to handle it using JWTs, access tokens, and refresh tokens. It emphasizes the need for proper authentication to ensure security and prevent data breaches. The post also provides a code example that shows how to implement authentication in a React codebase. 228 4 9. 9 [](/posts/passport-js-bkeeydvzt "Passport.js") Article Community Picks · 2y Passport.js Passport.js is an authentication middleware for Node.js that offers a flexible and modular approach to integrating user authentication into Express-based web applications. With over 500 strategies available, it supports various authentication methods such as username/password, social logins, and more. 214 3 10. 10 [](/posts/understanding-web-authentication-xd6knj11y "Understanding Web Authentication") Article asayer · 2y Understanding Web Authentication Website authentication is crucial for ensuring users are who they claim to be, guarding sensitive information, and maintaining trust. Various authentication methods include password-based, multi-factor, biometric, token-based, and certificate-based authentication. Additionally, common protocols such as OAuth 2.0, OpenID Connect, SAML, and LDAP are used to manage authentication processes securely. Effective implementation involves choosing the right method for user experience and security, integrating both frontend and backend properly, and adhering to security best practices. Balancing security with usability and using adaptive authentication can further enhance security measures. 211 4 11. 11 [](/posts/react-trends-in-2024-aibl25mkr "React Trends in 2024") Article Robin Wieruch · 3y React Trends in 2024 Exciting trends in React for 2024 include Astro with React, new authentication alternatives, tRPC for full-stack React applications, React Server Components and Next.js, TanStack Router for SPA React, Vercel pushing React on the Edge, bundlers for React, React Compiler, Biome, and headless UI libraries for React. 191 3 12. 12 [](/posts/stack-auth-stack-open-source-clerk-auth0-alternative-whnq8mewx "stack-auth/stack: Open-source Clerk/Auth0 alternative") Article Hacker News · 2y stack-auth/stack: Open-source Clerk/Auth0 alternative Stack Auth is an open-source, developer-friendly user authentication solution that supports Next.js frontends and backend integrations via REST API. It offers a quick setup and the flexibility to export and self-host user data at any time. The post provides comprehensive setup instructions including dependency installation through Docker, local development execution, and Prisma database initialization. Contributors are encouraged to join their Discord and follow contribution guidelines. 190 2 13. 13 [](/posts/how-to-build-an-invoice-saas-app-with-next-js-resend-clerk-and-neon-postgres-nsvtxyweh "How to Build an Invoice SaaS App with Next.js, Resend, Clerk and Neon Postgres") Article freeCodeCamp · 2y How to Build an Invoice SaaS App with Next.js, Resend, Clerk and Neon Postgres This tutorial guides you through building a complete invoicing web application using Next.js, Resend, Clerk, and Neon Postgres. Key functionalities include managing customers, creating invoices, printing and sending invoices via email, and handling real-time communication between the frontend and backend. You'll gain experience with setting up a Postgres database, implementing user authentication with Clerk, and using React-to-print for PDF generation. 167 14. 14 [](/posts/how-to-handle-permissions-like-a-senior-dev-gfwytrp7p "How To Handle Permissions Like A Senior Dev") Video Web Dev Simplified · 2y How To Handle Permissions Like A Senior Dev The post discusses how to handle permissions in applications effectively, moving beyond basic role checks. It covers different permission systems from simple to complex, including role-based access control (RBAC) and attribute-based access control (ABAC), and demonstrates their implementation through code examples and diagrams. The post also explains how to integrate these systems with the authentication service, Clerk, simplifying user role and permission management. 157 3 15. 15 [](/posts/jwt-authentication-best-practices-and-when-to-use-it-d0d1tym5n "JWT authentication: Best practices and when to use it") Article LogRocket · 2y JWT authentication: Best practices and when to use it JWTs are a widely used method for secure data transmission between parties. Although beneficial for API authentication and inter-service communication, JWTs pose challenges, especially in sessions due to token invalidation and storage issues. For secure use, store JWTs in HttpOnly cookies and utilize HTTPS. Consider alternatives for session management to address the limitations and potential security risks associated with JWTs. 150 4 16. 16 [](/posts/passwords-have-problems-but-passkeys-have-more-dwzoys6ad "Passwords have problems, but passkeys have more") Article David Heinemeier Hansson · 2y Passwords have problems, but passkeys have more Implementing passkeys can be extremely complex and their user experience is often subpar. Even in ideal conditions with synced devices, they can pose challenges, especially if access is needed from a non-primary device. While passwords have their issues, such as potential breaches if reused across services, passkeys aren't necessarily a better solution. Using email as a second factor on the first login from a new device is a viable alternative. The author concludes that the complexity and challenges of passkeys don't justify their use over traditional passwords and email-based 2FA solutions. 149 30 17. 17 [](/posts/microservices-authentication-and-authorization-using-api-gateway-3ozhaevfd "Microservices Authentication and Authorization Using API Gateway") Article Awesome Go · 3y Microservices Authentication and Authorization Using API Gateway Learn about the challenges of authentication and authorization in a microservices architecture, the benefits of using an API Gateway for access management, and how JSON Web Tokens (JWTs) are used for authentication in microservices. 145 3 18. 18 [](/posts/how-to-create-a-rest-api-without-a-server-moekqersz "How to Create a REST API Without a Server") Article freeCodeCamp · 2y How to Create a REST API Without a Server Learn how to create a REST API without a server using a Service Worker in the browser. Showcase your frontend skills and interact with a backend hosted in places where you can't access the server side. 136 19. 19 [](/posts/next-js-and-next-auth-v5-guide-to-social-logins-oauth--gupp1hbuo "Next.js and Next-Auth V5: Guide to Social Logins(OAuth)") Article Community Picks · 2y Next.js and Next-Auth V5: Guide to Social Logins(OAuth) Learn how to set up authentication using OAuth providers like Google and GitHub in Next.js using Next-Auth V5. 130 15 20. 20 [](/posts/auth-screens-for-your-laravel-apps-vy6b9febh "Auth Screens for Your Laravel Apps") Article Laravel News · 2y Auth Screens for Your Laravel Apps Managing multiple Laravel applications becomes simpler with DevDojo Auth, a free, open-source project offering customizable authentication pages compatible with Laravel 10.x and higher. Installation involves using Composer and publishing assets and configurations. The package allows for extensive customization, including setting up social authentication using provider credentials. Additional features include Github action workflows and built-in testing tools like Pest and Dusk. 117 8 21. 21 [](/posts/jwt-authentication-in-nodejs-dhoejfw3a "JWT Authentication in NodeJS") Article Community Picks · 3y JWT Authentication in NodeJS Learn how to implement JWT authentication in NodeJS. Understand what JWT is, how it works, and how to use it in a NodeJS project. Set up project environment, create authentication routes, and test the endpoints. 113 13 22. 22 [](/posts/build-a-login-and-logout-api-using-express-js-node-js--b1mx368cl "Build a Login and Logout API using Express.js (Node.js)") Article Community Picks · 2y Build a Login and Logout API using Express.js (Node.js) Learn to build a secure login and logout system using Express.js in Node.js. The tutorial covers setting up development files, installing dependencies, and creating a MongoDB database. It explains the basics of authentication and authorization, the logic for user registration and login, password hashing, and session management using JWT tokens. Additionally, it shows how to implement middleware for verifying user sessions and roles, and how to handle user logout securely. 109 23. 23 [](/posts/authentication-vs-authorization-4q36dzcbu "Authentication vs Authorization") Article Cerbos · 2y Authentication vs Authorization Understanding authentication and authorization is key to securing applications. Authentication verifies user identity, while authorization determines what authenticated users are allowed to do. Authentication methods include passwords and biometrics, whereas authorization relies on access control lists and roles. Effective authorization systems need to be scalable and flexible. Services like Cerbos offer robust, scalable solutions that enhance security by ensuring only permitted users access sensitive data. 105 8 24. 24 [](/posts/stop-recommending-jwts-with-symmetric-keys-truffle-security-co--fnr398fxt "Stop Recommending JWTs (with symmetric keys) ◆ Truffle Security Co.") Article Community Picks · 2y Stop Recommending JWTs (with symmetric keys) ◆ Truffle Security Co. This post discusses the issues with using symmetric key JWTs, including the high percentage of guessable keys and the risk of undermining authentication and authorization security. 104 12 25. 25 [](/posts/wtf-are-jwts--ot7zjeokz "WTF Are JWTs?") Article Neon · 2y WTF Are JWTs? JSON Web Tokens (JWTs) are compact, self-contained tokens used for transmitting information securely. They emerged as a solution to the limitations of session-based authentication, offering stateless authentication, cross-domain compatibility, scalability, and security. JWTs are commonly used in modern web applications, especially with services like Neon Authorize, to manage authorization at the database level through row-level security. The process includes signing the tokens to ensure authenticity, though they are not encrypted by default. 103 2 [See all Authentication archives](/tags/authentication/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/authentication/best-of/2024#page","url":"https://daily.dev/tags/authentication/best-of/2024","name":"Best Authentication Posts of 2024","description":"The most upvoted Authentication posts of 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/authentication/best-of/2024#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/jwt-explained-in-4-minutes-with-visuals--298cbbsyf","name":"JWT explained in 4 minutes (With Visuals)"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/jwt-vs-paseto-new-era-of-token-based-authentication-to2objxxo","name":"JWT vs PASETO: New Era of Token-Based Authentication"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/session-based-vs-token-based-authentication-which-is-better--gu24tmoty","name":"🔐 Session-Based vs. Token-Based Authentication: Which is better?🤔"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/better-auth-mlybduwgh","name":"Better Auth"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/how-ssh-really-works-yllkl1rqi","name":"How SSH Really Works"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/oauth-2-0-flows-explained-in-gifs-beqiosycs","name":"🔑 OAuth 2.0 flows explained in GIFs"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/understanding-jwt-oauth-and-bearer-tokens-8cuqxswdw","name":"Understanding JWT, OAuth, and Bearer tokens"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/authentication-in-react-with-jwts-access-refresh-tokens-complete-tutorial--satb8ylax","name":"Authentication in React with JWTs, Access & Refresh Tokens (Complete Tutorial)"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/passport-js-bkeeydvzt","name":"Passport.js"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/understanding-web-authentication-xd6knj11y","name":"Understanding Web Authentication"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/react-trends-in-2024-aibl25mkr","name":"React Trends in 2024"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/stack-auth-stack-open-source-clerk-auth0-alternative-whnq8mewx","name":"stack-auth/stack: Open-source Clerk/Auth0 alternative"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/how-to-build-an-invoice-saas-app-with-next-js-resend-clerk-and-neon-postgres-nsvtxyweh","name":"How to Build an Invoice SaaS App with Next.js, Resend, Clerk and Neon Postgres"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/how-to-handle-permissions-like-a-senior-dev-gfwytrp7p","name":"How To Handle Permissions Like A Senior Dev"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/jwt-authentication-best-practices-and-when-to-use-it-d0d1tym5n","name":"JWT authentication: Best practices and when to use it"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/passwords-have-problems-but-passkeys-have-more-dwzoys6ad","name":"Passwords have problems, but passkeys have more"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/microservices-authentication-and-authorization-using-api-gateway-3ozhaevfd","name":"Microservices Authentication and Authorization Using API Gateway"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/how-to-create-a-rest-api-without-a-server-moekqersz","name":"How to Create a REST API Without a Server"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/next-js-and-next-auth-v5-guide-to-social-logins-oauth--gupp1hbuo","name":"Next.js and Next-Auth V5: Guide to Social Logins(OAuth)"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/auth-screens-for-your-laravel-apps-vy6b9febh","name":"Auth Screens for Your Laravel Apps"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/jwt-authentication-in-nodejs-dhoejfw3a","name":"JWT Authentication in NodeJS"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/build-a-login-and-logout-api-using-express-js-node-js--b1mx368cl","name":"Build a Login and Logout API using Express.js (Node.js)"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/authentication-vs-authorization-4q36dzcbu","name":"Authentication vs Authorization"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/stop-recommending-jwts-with-symmetric-keys-truffle-security-co--fnr398fxt","name":"Stop Recommending JWTs (with symmetric keys) ◆ Truffle Security Co."},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/wtf-are-jwts--ot7zjeokz","name":"WTF Are JWTs?"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Authentication","item":"https://daily.dev/tags/authentication"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/authentication/best-of"},{"@type":"ListItem","position":5,"name":"2024"}]}]} ```