← Virtual projects
Free
Review to certify
Express Auth Lab (Sessions)
Implement register/login/logout with sessions and protected routes — not just a CRUD API.
Express
Session auth
Password hashing
Protected routes
Security basics
Build a Node.js + Express app with cookie sessions (or JWT if you justify it).
Must include:
1) Register + login + logout
2) Password hashing (bcrypt)
3) At least one protected route (/me or /dashboard)
4) Basic input validation + clear error messages
5) Short threat note (session fixation / cookie flags)
Submit: repo or demo notes + reflection.
Sign in to complete steps and earn an e-certificate.
Log in