Server Side Session Authentication | Go with Vue.js Authentication

In this video we are going to learn how to use Server Side Sessions for session authentication for a front end website using Go, PostgreSQL, and Vue.js.

We will be using Go Fiber for our server and sessions (you could use redis in place of Go Fiber's sessions library).

Once we get our authentication up and running we will test it with Postman and then create a simple UI using Vue.js where we can login and view our Session ID that our back end will use.

Our session will be stored as a UUID in a HTTP only cookie so that it will be harder to attack.

Whereas a JWT has more 'surface' vectors to attack because there is header information that is passed to the server with each request.

If you are using JWTs for your website's session authentication you may want to reconsider.

Here are a couple blog posts for more information: http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/ http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-for-sessions-part-2-why-your-solution-doesnt-work/

And here is a good video explaining JWTs vs Server Side Sessions: https://youtu.be/U6OcC0yq1CE

If you wanna support my channel, you can buy me a coffee: ☕️ https://www.buymeacoffee.com/nerdcademy Coffee make the code go!!!

All code found in this video will be at: 💻 https://github.com/NerdCademyDev/golang

🤓 Let me know if you have any issues!

⚡️ What else would you like me to cover?

🎓 Always Keep Learning!

🎨 Gopher Character artwork from: https://github.com/MariaLetta/free-gophers-pack

00:00 Introduction 01:16 Coding the Model 07:46 Coding the Server 21:34 Testing with Postman 24:45 Coding the UI

#serversidesessions #golang #nerdcademy #serversidesessionsvsjwts ... https://www.youtube.com/watch?v=Ck919fGGbCw