Web Application Security

Authentication

Prove identity — passwords, tokens, MFA, OIDC, passkeys.

Eight practical AuthN labs: login flows, password hashing, JWT, MFA/TOTP, OAuth/OIDC, WebAuthn/passkeys, session cookies, and authentication attack detection. Authorization topics (IDOR, RBAC, privilege escalation) are intentionally out of scope — take Web AppSec / access-control modules for AuthZ.

Level: Intermediate
Duration: 4–6 weeks
Modules: 4 modules · 9 lessons
Learning method: Lessons + labs

Preview first lesson

What you will learn

Implement secure registration/login with hashed passwords
Verify JWTs and manage access/refresh token expiry
Enroll and verify TOTP MFA with backup codes
Complete OIDC Authorization Code login with state/nonce checks
Explain WebAuthn ceremonies and origin/RP ID binding
Harden session cookies and detect login attacks in logs

Course curriculum

Expand each module for lessons, progress, and labs assigned to that module — not a flat topic dump.

Module 1

Password authentication fundamentals

Registration/login and secure password storage — AuthN only.

0/3 lessons

Lessons

1. Authentication vs Authorization Boundarypreview~20 min
2. Registration and Login Flow~20 min
3. Password Hashing KDFs~20 min

Module labs

Enrol to unlock full lessons and track module progress.

Module 2

Tokens and browser sessions

JWT access/refresh and secure session cookies.

0/2 lessons

Lessons

1. JWT Access and Refresh Tokens~20 min
2. Session Cookie Security~20 min

Module labs

Enrol to unlock full lessons and track module progress.

Module 3

Strong authentication factors

MFA/TOTP and passwordless passkeys.

0/2 lessons

Lessons

1. TOTP MFA Enrollment~20 min
2. Passkeys and WebAuthn~20 min

Module labs

Enrol to unlock full lessons and track module progress.

Module 4

Federation and AuthN defense

OIDC login and detecting authentication attacks.

0/2 lessons

Lessons

1. OAuth 2.0 and OpenID Connect Login~20 min
2. Authentication Attack Detection~20 min

Module labs

Enrol to unlock full lessons and track module progress.

Inside this course

Labs · Quizzes · Certificate

Labs below are curated for this syllabus (shared engine, course-specific assignments). They unlock with enrol; quizzes match course topics; finish ≈90%+ to claim a CYNARKS Academy certificate.

Course labs

8 assigned labs · free with this course enrol

Basic Login AuthenticationUnlock via course or plan
Password Hashing & VerificationUnlock via course or plan
JWT AuthenticationUnlock via course or plan
Multi-Factor Authentication (MFA)Unlock via course or plan
OAuth 2.0 & OpenID ConnectUnlock via course or plan
Passkeys & WebAuthnUnlock via course or plan
Session Authentication SecurityUnlock via course or plan
Authentication Attack DetectionUnlock via course or plan

Track quiz

356 questions matched to this course topics

Knowledge checks for this track only — not a separate global quiz menu.

Start track quiz

CYNARKS certificate

Educational completion certificate · verify by ID

Your progress: 0% · enrol to unlock claim

Enrol in this course first.