Secure Your Angular App Using JWT And GraphQL

By Ankit Sharma on 23 Sep 2023 @ Nullcon
πŸ“Š Presentation πŸ”— Link
#blueteam #api-security #secure-development #security-testing
Focus Areas: πŸ›‘οΈ Security Operations & Defense , πŸ” Application Security , βš™οΈ DevSecOps , 🌐 Web Application Security

Abstract

We will learn how to implement JWT-based authentication in a full-stack application created using Angular and .NET. The app will have support for policy-based authorization. We will use GraphQL for querying the APIs.

Key Takeaways:

What is a JWT? Structure of JWT Create a GraphQL server using .NET & Chilli Cream hot chocolate to support JWT authentication. Add policy-based authorization to the APIs Use the Apollo GraphQL to consume the API on an Angular client Use HTTP interceptors to allow secure access to the APIs Implement route guards to secure the URL routing