Authenticating Application Users with Okta in JavaScript

Module 1: Authentication Fundamentals

⏳ 1 week

• Topics: OAuth 2.0 flows, OpenID Connect, JSON Web Tokens, security considerations

• Hands-on: Diagram and simulate the authorization code flow with PKCE

Module 2: Okta Setup & Configuration

⏳ 1 week

• Topics: Okta Developer Console, applications vs. APIs, client credentials, redirect URIs

• Hands-on: Create an Okta org, configure a JavaScript SPA application, and register scopes

Module 3: Front-End Integration (React)

⏳ 1 week

• Topics: @okta/okta-auth-js and @okta/okta-react packages, secure routing, token storage

• Hands-on: Build a React app with protected routes, user profile display, and logout

Module 4: Back-End Integration (Node.js)

⏳ 1 week

• Topics: Verifying and decoding JWTs, middleware setup, role-based access control

• Hands-on: Implement Express middleware to protect API endpoints and enforce scopes

Module 5: Advanced Features

⏳ 1 week

• Topics: Multi-Factor Authentication (MFA), social login, custom sign-in widgets, session management

• Hands-on: Enable MFA in your Okta org and integrate Google social login

Module 6: Token Lifecycle & Security Best Practices

⏳ 1 week

• Topics: Refresh tokens, token revocation, secure cookie vs. local storage, CORS considerations

• Hands-on: Implement silent token renewal and safe storage strategies

Module 7: User Management & APIs

⏳ 1 week

• Topics: Okta Management API usage for users/groups, automations, and event hooks

• Hands-on: Write scripts to bulk-import users and assign group memberships via the API

Module 8: Capstone Project

⏳ 1 week

• Topics: End-to-end authentication flow, error handling, logging, and deployment

• Hands-on: Build and deploy a full-stack JavaScript app (React + Node) secured by Okta

Get certificate