강의

멘토링

커뮤니티

NEW
Programming

/

Web Development

Implementing Secure JWT Login with Spring Boot and React

This course is a practical-focused learning program for JWT-based token authentication and security enhancement techniques that are essential in modern web service environments. Using Spring Boot 3, Spring Security 6, and React, you'll implement secure login systems and cover comprehensive security practices including XSS·CSRF countermeasures, HTTPS implementation, token reissuance and revocation strategies, and secure secret key management. Additionally, you'll practice real service-level environment configuration through AWS build·deployment and performance optimization using Redis, and the complete project source code provided in the course can be directly applied to real-world work.

118 learners are taking this course

  • oncoding
스프링
자바
jwt
aws
react
React
Java
AWS
Spring Boot
Spring Security

What you will gain after the course

  • Designing and Implementing JWT-Based Login Functionality from Scratch

  • Building a Secure Authentication System Using Spring Boot 3 and Spring Security 6

  • Developing Single Page Applications (SPA) with React and JWT Authentication Integration

  • HTTPS Implementation and AWS Application Build & Deployment Practice

  • Learning defense techniques against major web security attacks such as XSS, CSRF, etc.

  • Implementing Token Reissuance Using Refresh Token and Blacklist-Based Token Revocation

  • Hands-on Practice: Secure Secret Key Management Using AWS Secrets Manager and Parameter Store

  • Boosting Authentication System Speed and Efficiency with Redis

  • Building a User Authentication Database Using JPA and MySQL

  • Complete a Production-Level Security-Enhanced Full-Stack Project and Deploy Directly to AWS

📢 Course Introduction

This course is a practical-focused program for learning JWT-based token authentication and security technologies that are essential in modern web service environments. Going beyond simple login implementation, you'll directly design and build enterprise-level security architectures, and complete safe and efficient authentication systems using the latest technology stack including Spring Boot 3, Spring Security 6, and React.

The course implements core security concepts such as HTTPS application, XSS·CSRF defense, token reissuance and revocation strategies with actual code, and proceeds with application build and deployment in AWS environment. Additionally, you'll learn how to securely manage secret keys through AWS Secrets Manager and Parameter Store, and how to improve authentication processing speed using Redis.

After completing the course, you can directly develop a security-enhanced JWT login system and integrate it with a React-based SPA to build a production-level web service. Through this, you can gain full-stack security project experience that encompasses backend, frontend, and cloud environments, and obtain a complete deliverable that can be immediately applied to real work or your portfolio.

✨ Course Appeal Points

  • We'll implement a JWT authentication system at actual service level, not just simple theory.

  • Practice core security technologies including XSS, CSRF, HTTPS, token reissuance and revocation.

  • Build and deploy applications on AWS and gain hands-on experience with cloud environments.

  • We utilize the latest technology stack including Spring Boot 3, Spring Security 6, React, JPA, MySQL, Redis, and more.

  • Complete a security-enhanced full-stack project that integrates backend and frontend.

  • Understand security issues by JWT token storage location (localStorage, HttpOnly cookies, etc.) and handle them safely.

  • Optimize the speed and efficiency of authentication systems using Redis.

  • Design and implement Refresh Token reissuance strategies using 3 different approaches.

  • Integrating JWT authentication in a React-based Single Page Application (SPA).

  • You can directly apply the lecture example source code to a real-world environment.

  • We provide a comprehensive learning experience that encompasses security, development, and cloud technologies.

📘 What You'll Learn in This Course

1. JWT-based Authentication and Security Fundamentals

In this course, you will understand the concepts and operating principles of JWT (Json Web Token) and clearly learn the differences from session authentication methods.
You will learn core security concepts through hands-on practice, including JWT authentication structure, differences between Bearer authentication and cookie authentication, and token signing and verification methods. You will also learn secure authentication implementation methods based on security checklists, including token expiration time management, claim verification, and algorithm attack prevention.

2. Practical Security Enhancement and Token Management Strategies

This covers the security guidelines and practical response methods you must know when using JWT.
Experience XSS (Cross-Site Scripting) and CSRF (Cross-Site Request Forgery) attacks through hands-on practice, and directly implement defense techniques for each attack.
Additionally, analyze security differences by token storage location (localStorage, HttpOnly cookies, memory), and design and implement refresh token reissuance strategies in three different ways.
Furthermore, learn token revocation strategies (blacklist approach) and proceed with actual implementation in both RDB and Redis environments.

3. AWS-based practical environment setup and project completion

This course covers actual service-level deployment processes.
Using AWS RDS, EC2, S3, CloudFront, Route 53, and ELB, we'll build a deployment architecture with completely separated backend and frontend.
By applying HTTPS to both backend and frontend servers, you'll learn practical security certificate configuration methods,
and discover how to securely manage secret keys using AWS Secrets Manager and Parameter Store.
Finally, we'll enhance system performance using Redis and complete a React + Spring Boot + JWT-based security-enhanced full-stack project as the final deliverable.

Recommended for
these people

Who is this course right for?

  • Backend developers who want to implement enhanced security login functionality themselves

  • Java web developers who want to apply the latest versions of Spring Boot and Spring Security in real-world projects

  • A frontend developer who wants to understand JWT authentication structure and learn how to integrate it with React

  • Developers interested in security who want to learn web security techniques like HTTPS, XSS, CSRF through actual code

  • Cloud beginners who want to experience building and deploying applications in AWS environments

  • Full-stack development-oriented learner who wants to learn high-performance authentication system design using Redis, JPA, and MySQL

  • Job seekers and entry-level developers who want to complete security-focused projects to add to their portfolio

Need to know before starting?

  • Java Basic Syntax and Understanding Object-Oriented Programming (OOP) Concepts

  • Spring Boot basic structure and REST API development experience

  • HTML, CSS, JavaScript and other web frontend fundamentals

  • Basic understanding of React's component structure and state management (useState, useEffect, etc.)

  • Understanding HTTP protocol concepts including requests/responses, headers, cookies, etc.

  • (Optional) Basic concepts of cloud services such as AWS EC2, S3, RDS, etc.

Hello
This is

359

Learners

5

Reviews

14

Answers

5.0

Rating

2

Courses

Curriculum

All

68 lectures ∙ (16hr 8min)

Published: 
Last updated: 

Reviews

Not enough reviews.
Please write a valuable review that helps everyone!

Limited time deal ends in 00:59:53

$45.10

24%

$59.40

oncoding's other courses

Check out other courses by the instructor!

Similar courses

Explore other courses in the same field!