Security Concepts
Review the security prerequisites for backend APIs, including password hashing with bcrypt and the difference between authentication and authorization.
Guards, Passport, and JSON Web Tokens (JWT)
Understand NestJS guards, the Passport strategy pattern, and the structure of JSON Web Tokens to build a secure authentication layer.
Authentication with JWT
Implement a complete JWT authentication module in NestJS, step by step, and test the login endpoint.
Permission-Based Access Control
Move from role-based to permission-based access control in NestJS by creating a Permissions decorator and a PermissionsGuard.
Interceptors and Logging
Add logging and cross-cutting concerns to NestJS with a custom file logger and interceptors that keep controllers focused on business logic.
Slides of the Week
Review the official slides of Week 7 on security fundamentals, bcrypt hashing, Passport, JSON Web Tokens, and granular access control.