Antas c Antony

💻 MERN Stack Developer
🚀 Building real-world web applications
📚 Learning React, TypeScript & DSA
🌱 Sharing my coding journey

[Antas c Antony @antas_antony]

Why store Refresh Tokens in HttpOnly cookies? 🤔

At first, I thought localStorage is enough…

But I learned HttpOnly cookies protect tokens from XSS attacks🚨
JS can’t access them → much safer for auth systems.
Small change, BIG security upgrade🔥

#NodeJS #JWT #Security #Auth

[Antas c Antony @antas_antony]

Why must authenticate run BEFORE authorize?🤔

At first, I thought order doesn’t matter

But I learned:
👉 First you verify WHO the user is (authenticate 🔐)
👉 Then you check WHAT they are allowed to do (authorize ⚡)
Reverse the order = broken security logic

#Security #Auth

[Antas c Antony @antas_antony]

Access Token vs Refresh Token 🔐🤔

Why do we use both… not just one?

Why is Access Token short-lived ⏳?

Why do we store Refresh Tokens in DB?

What really happens when an Access Token expires?

Yesterday I learned: it’s all about security + user experience balance 🔥

#jwt

[Antas c Antony @antas_antony]

Why should we never trust req.body.userId for auth, but trust https://t.co/SirRS2EnM9 from JWT? 🤔

One comes from the user 😬, the other is verified by the server 🔐.

Same ID, completely different trust level. 🔥

#NodeJS #JWT #Backend #Security

[Antas c Antony @antas_antony]

A few months ago I built a React Todo app while vibe coding 🧠
It worked but felt out of control 😵‍💫
Then I learned useState & useEffect ⚛️

Rebuilt it 🔁

Now it’s simple, predictable & fully in my control 💪✨

#React #JavaScript #MERN

[Antas c Antony @antas_antony]

In my first project, I used sessions for login auth.

While planning my second project with multiple phases, I started wondering if sessions are enough for scaling 🤔

That’s when I came across JWT 🔐 and started learning it deeply.

#NodeJS #JWT #Backend

[Antas c Antony @antas_antony]

👋 Hi, I'm Antas.

I’m a self-taught MERN Stack Developer.

I have completed an eCommerce platform using JavaScript, Node.js, Express, MongoDB, and EJS.

I’m currently improving React and learning JWT authentication.

Let’s see where this goes 🚀

#MERN #ReactJS #JWT

[Antas c Antony @antas_antony]

@celestialgenie well

[Antas c Antony @antas_antony]

@dulQuer powli