--- title: Best Authentication posts — June 2024 | daily.dev description: The most upvoted Authentication posts from June 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/authentication/best-of/2024/06 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/authentication/best-of/2024/06 og:type: website og:site_name: daily.dev og:title: Best Authentication posts — June 2024 | daily.dev og:description: The most upvoted Authentication posts from June 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Authentication — June 2024 1. 1 [](/posts/jwt-vs-paseto-new-era-of-token-based-authentication-to2objxxo "JWT vs PASETO: New Era of Token-Based Authentication") Article Community Picks · 2y JWT vs PASETO: New Era of Token-Based Authentication The post offers a detailed comparison between JWT (JSON Web Token) and PASETO (Platform-Agnostic Security Tokens), examining their core functionalities, security features, and potential vulnerabilities. While JWT is popular for its simplicity, PASETO addresses many of its security issues by enforcing safer defaults and mitigating algorithm confusion. The post covers the workflows of both token types, their structures, and key differences in their approach to security, making it a valuable read for developers looking to implement secure token-based authentication. 360 4 2. 2 [](/posts/authentication-in-react-with-jwts-access-refresh-tokens-complete-tutorial--satb8ylax "Authentication in React with JWTs, Access & Refresh Tokens (Complete Tutorial)") Video Community Picks · 2y Authentication in React with JWTs, Access & Refresh Tokens (Complete Tutorial) This post explains the importance of authentication in a React application and how to handle it using JWTs, access tokens, and refresh tokens. It emphasizes the need for proper authentication to ensure security and prevent data breaches. The post also provides a code example that shows how to implement authentication in a React codebase. 228 4 3. 3 [](/posts/next-js-and-next-auth-v5-guide-to-social-logins-oauth--gupp1hbuo "Next.js and Next-Auth V5: Guide to Social Logins(OAuth)") Article Community Picks · 2y Next.js and Next-Auth V5: Guide to Social Logins(OAuth) Learn how to set up authentication using OAuth providers like Google and GitHub in Next.js using Next-Auth V5. 130 15 4. 4 [](/posts/authentication-history-basic-digest-cookie-session-token-jwt-api-key--qfjx94i7c "Authentication history (Basic, Digest, Cookie, Session, Token, JWT, API key)") Article Community Picks · 2y Authentication history (Basic, Digest, Cookie, Session, Token, JWT, API key) This post provides an overview of different authentication methods including Basic, Digest, Cookie, Session, Token, JWT, and API key. It highlights the benefits and drawbacks of each method and suggests combining them to achieve the best authentication solution. 87 1 5. 5 [](/posts/full-stack-flutter-firebase-and-riverpod-build-a-youtube-clone-hm5lujweq "Full Stack Flutter, Firebase and Riverpod – Build a YouTube Clone") Video Community Picks · 2y Full Stack Flutter, Firebase and Riverpod – Build a YouTube Clone Learn how to build a fully functional YouTube clone using Flutter, Firebase, and Riverpod. The tutorial covers various features including Google sign-in authentication, uploading and displaying videos, profile customization, and more. The username validation functionality ensures that unique usernames are used. By the end of the tutorial, you will have a good understanding of Flutter, Firebase, and Riverpod. 45 6. 6 [](/posts/frontend-focus-issue-648-june-19-2024-myd5vcaze "Frontend Focus Issue 648: June 19, 2024") Article Frontend Focus · 2y Frontend Focus Issue 648: June 19, 2024 The CSS Working Group has resolved to add inline \`if()\` to CSS, marking a significant step forward. An exploration of the 2-page login pattern explains its prevalence and offers better user-friendly alternatives. A guide details how to test websites on Apple’s visionOS. The CSS Anchor Position API's potential for creating flow charts is demonstrated, and there's advice on optimizing commerce site performance and engineering for slow internet connections. 29 1 7. 7 [](/posts/getting-started-with-spring-security-and-jwt-s7kbr3qnz "Getting started with Spring Security and JWT") Article Reflectoring · 2y Getting started with Spring Security and JWT Spring Security offers robust security features for Java applications, including session management, authentication, and protection against common threats like CSRF. This guide covers the implementation of JWT (JSON Web Token) for secure communication between two parties. JWTs are versatile and can be used for single sign-on, API authentication, stateless sessions, and microservices. It covers the creation, structure, common use cases, and potential drawbacks of JWTs, as well as a step-by-step guide to implement JWT for authentication in a Spring Boot application. 24 8. 8 [](/posts/radix-themes-awesome-new-components-for-nextjs-j49cwymaa "Radix Themes: Awesome New Components For NextJS") Video Jack Herrington · 2y Radix Themes: Awesome New Components For NextJS Radix Themes is an awesome new UI library built on top of Radix. It is compatible with NextJS app router and React server components. The library offers a variety of theme configurable components for building basic apps with great design and accessibility. 24 1 9. 9 [](/posts/top-9-api-security-vulnerabilities-how-to-defend-against-them-uuhn558gl "Top 9 API Security Vulnerabilities: How to Defend Against Them") Article The New Stack · 2y Top 9 API Security Vulnerabilities: How to Defend Against Them API vulnerabilities can lead to data exposure, broken authentication, and authorization issues. Mitigating these risks requires strict output filtering, multi-factor authentication, and enforcing data access permissions. 23 1 10. 10 [](/posts/rodz-input-otp-lsxbazrpl "rodz/input-otp") Article Community Picks · 2y rodz/input-otp A library called rodz/input-otp that provides code validation and authentication. 22 1 11. 11 [](/posts/adding-jwt-authentication-in-asp-net-core-with-supabase-auth-3g0v9qgps "Adding JWT Authentication in ASP.NET Core With Supabase Auth") Video Community Picks · 2y Adding JWT Authentication in ASP.NET Core With Supabase Auth Learn how to implement JWT authentication in ASP.NET Core using Superbase authentication. Superbase is an open-source cloud platform that offers tools and services for building applications. The core feature of Superbase is its cloud database, which is built on top of Postgres. Superbase authentication provides a user management system with support for various social authentication providers. The authentication flow involves obtaining an access token from Superbase and configuring the ASP.NET Core API to authenticate JSON web tokens. Additional features of Superbase include cloud storage, edge functions, and real-time capabilities. 21 1 12. 12 [](/posts/i-ve-created-an-open-source-spring-boot-nextjs-starter-kit-xtbm9mkxy "I've created an open source Spring Boot + Nextjs starter kit") Article Community Picks · 2y I've created an open source Spring Boot + Nextjs starter kit Open source Spring Boot + Nextjs starter kit with authentication, basic s3 integration, and frontend pages for basic user actions. Easily customizable with any frontend framework. 19 13. 13 [](/posts/one-does-not-simply-delete-cookies-qh241iujj "One does not simply delete cookies") Article Community Picks · 2y One does not simply delete cookies A developer faced issues with deleting cookies in production using the Astro framework. The post explains that cookies are actually modified instead of being deleted, and how servers send instructions to browsers to modify cookies. The issue was due to incorrect cookie options in the code, which were resolved by checking the cookie options in the browser dev tools and updating the code accordingly. 18 4 14. 14 [](/posts/adding-custom-header-parameter-to-api-in-swagger-3thbxz9h3 "Adding Custom Header Parameter to API in Swagger") Article Code Maze · 2y Adding Custom Header Parameter to API in Swagger Learn how to add a custom header parameter to API endpoints in Swagger to enhance API documentation, security, and usability. 17 15. 15 [](/posts/how-to-quickly-add-auth-to-your-flutter-apps-with-supabase-auth-ui-t4zh7rxdj "How to Quickly Add Auth to your Flutter Apps with Supabase Auth UI") Article freeCodeCamp · 2y How to Quickly Add Auth to your Flutter Apps with Supabase Auth UI Learn how to quickly add authentication functionality to your Flutter apps using Supabase Auth UI. The package offers pre-configured, theme-able widgets for creating authentication forms with support for email and password auth, OAuth/social login auth (including Google and GitHub), and magic link auth. 17 16. 16 [](/posts/let-s-get-authenticated-google-sign-in-j0sjrtgtb "Let’s get Authenticated — Google Sign In") Article Javarevisited · 2y Let’s get Authenticated — Google Sign In This post provides a full-stack solution for implementing Google Sign In using React.js and Spring Boot. It covers configuring Google APIs and Services, setting up the front-end using React.js, and implementing authentication in the back-end using Spring Boot. 16 17. 17 [](/posts/creating-a-rest-api-with-ruby-on-rails-chapter-1-initial-setup-and-models-i1jtqltal "Creating a REST API with Ruby on Rails. Chapter 1: Initial Setup and Models") Article Ruby Flow · 2y Creating a REST API with Ruby on Rails. Chapter 1: Initial Setup and Models A guide to creating a REST API with Ruby on Rails, covering topics such as authentication, authorization, serialization, and database structure. 13 18. 18 [](/posts/pycoder-s-weekly-yfxzcpidf "PyCoder’s Weekly") Article Planet Python · 2y PyCoder’s Weekly This post covers topics such as hashable objects in Python, fixing Python circular imports, and comparing NumPy universal functions with strings. 13 19. 19 [](/posts/understanding-two-types-of-oauth2-authorization-workflows-egleldgrj "Understanding Two types of OAuth2 Authorization Workflows") Article Snowflake Community · 2y Understanding Two types of OAuth2 Authorization Workflows OAuth2 provides machine/client to machine/resource communication with trusted connections. There are two main flows of OAuth2 authorization workflows: resource owner password flow and authorization code flow. 12 20. 20 [](/posts/elixir-in-action-third-edition-kr6snhwmh "Elixir in Action, Third Edition") Article Awesome Elixir · 2y Elixir in Action, Third Edition Elixir in Action, Third Edition is an authoritative bestseller that covers how Elixir tackles scalability, fault tolerance, and high availability. It provides updates for Elixir 1.15 and teaches the underlying principles and functional concepts of Elixir. 12 1 21. 21 [](/posts/implementing-robust-graphql-authentication-with-apollo-leveraging-custom-directives-and-plugins-for-xxmdp1ey0 "Implementing Robust GraphQL Authentication with Apollo: Leveraging Custom Directives and Plugins for Precise Access Control") Article Javarevisited · 2y Implementing Robust GraphQL Authentication with Apollo: Leveraging Custom Directives and Plugins for Precise Access Control GraphQL's single endpoint architecture necessitates a unified access control strategy, unlike REST APIs. Traditional methods of endpoint-specific authentication don't apply. One solution is using custom directives and Apollo plugins to implement fine-grained access control efficiently. These plugins allow centralized authentication mechanisms, support OAuth 2.0 integrations, and offer features like encryption and redaction of sensitive fields. The new authorization plugin provides a reusable framework that simplifies maintaining consistent access policies. 11 22. 22 [](/posts/spring-boot-user-impersonation-with-spring-security-in-7-minutes-hk0gljslf "Spring boot user impersonation with spring security in 7 minutes") Video Community Picks · 2y Spring boot user impersonation with spring security in 7 minutes The post provides a step-by-step guide on implementing user impersonation in a Spring Boot application using Spring Security. User impersonation allows an administrator to assume the identity and permissions of another user for troubleshooting and support purposes. The tutorial utilizes a preconfigured starter kit and details the necessary backend and frontend modifications, including setting up the SwitchUserFilter and defining URLs for switching and exiting user contexts. 11 23. 23 [](/posts/django-tutorial-10---authentication-vtjiagg2p "Django Tutorial #10 - Authentication") Video Net Ninja · 2y Django Tutorial #10 - Authentication This tutorial covers the final chapter of a Django course, focusing on implementing user authentication. It guides users through setting up user registration, login, and logout functionalities using Django's built-in authentication system. The tutorial provides detailed instructions on creating authentication forms, configuring necessary settings, and redirecting users to specific pages based on their authentication status. By the end, users will have a functional authentication system for their Django application, allowing secure access management. 11 [See all Authentication archives](/tags/authentication/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/authentication/best-of/2024/06#page","url":"https://daily.dev/tags/authentication/best-of/2024/06","name":"Best Authentication Posts — June 2024","description":"The most upvoted Authentication posts from June 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/authentication/best-of/2024/06#items","numberOfItems":23,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/jwt-vs-paseto-new-era-of-token-based-authentication-to2objxxo","name":"JWT vs PASETO: New Era of Token-Based Authentication"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/authentication-in-react-with-jwts-access-refresh-tokens-complete-tutorial--satb8ylax","name":"Authentication in React with JWTs, Access & Refresh Tokens (Complete Tutorial)"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/next-js-and-next-auth-v5-guide-to-social-logins-oauth--gupp1hbuo","name":"Next.js and Next-Auth V5: Guide to Social Logins(OAuth)"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/authentication-history-basic-digest-cookie-session-token-jwt-api-key--qfjx94i7c","name":"Authentication history (Basic, Digest, Cookie, Session, Token, JWT, API key)"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/full-stack-flutter-firebase-and-riverpod-build-a-youtube-clone-hm5lujweq","name":"Full Stack Flutter, Firebase and Riverpod – Build a YouTube Clone"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/frontend-focus-issue-648-june-19-2024-myd5vcaze","name":"Frontend Focus Issue 648: June 19, 2024"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/getting-started-with-spring-security-and-jwt-s7kbr3qnz","name":"Getting started with Spring Security and JWT"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/radix-themes-awesome-new-components-for-nextjs-j49cwymaa","name":"Radix Themes: Awesome New Components For NextJS"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/top-9-api-security-vulnerabilities-how-to-defend-against-them-uuhn558gl","name":"Top 9 API Security Vulnerabilities: How to Defend Against Them"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/rodz-input-otp-lsxbazrpl","name":"rodz/input-otp"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/adding-jwt-authentication-in-asp-net-core-with-supabase-auth-3g0v9qgps","name":"Adding JWT Authentication in ASP.NET Core With Supabase Auth"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/i-ve-created-an-open-source-spring-boot-nextjs-starter-kit-xtbm9mkxy","name":"I've created an open source Spring Boot + Nextjs starter kit"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/one-does-not-simply-delete-cookies-qh241iujj","name":"One does not simply delete cookies"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/adding-custom-header-parameter-to-api-in-swagger-3thbxz9h3","name":"Adding Custom Header Parameter to API in Swagger"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/how-to-quickly-add-auth-to-your-flutter-apps-with-supabase-auth-ui-t4zh7rxdj","name":"How to Quickly Add Auth to your Flutter Apps with Supabase Auth UI"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/let-s-get-authenticated-google-sign-in-j0sjrtgtb","name":"Let’s get Authenticated — Google Sign In"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/creating-a-rest-api-with-ruby-on-rails-chapter-1-initial-setup-and-models-i1jtqltal","name":"Creating a REST API with Ruby on Rails. Chapter 1: Initial Setup and Models"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/pycoder-s-weekly-yfxzcpidf","name":"PyCoder’s Weekly"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/understanding-two-types-of-oauth2-authorization-workflows-egleldgrj","name":"Understanding Two types of OAuth2 Authorization Workflows"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/elixir-in-action-third-edition-kr6snhwmh","name":"Elixir in Action, Third Edition"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/implementing-robust-graphql-authentication-with-apollo-leveraging-custom-directives-and-plugins-for-xxmdp1ey0","name":"Implementing Robust GraphQL Authentication with Apollo: Leveraging Custom Directives and Plugins for Precise Access Control"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/spring-boot-user-impersonation-with-spring-security-in-7-minutes-hk0gljslf","name":"Spring boot user impersonation with spring security in 7 minutes"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/django-tutorial-10---authentication-vtjiagg2p","name":"Django Tutorial #10 - Authentication"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Authentication","item":"https://daily.dev/tags/authentication"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/authentication/best-of"},{"@type":"ListItem","position":5,"name":"June 2024"}]}]} ```