• CSE 341 - Web Services - Winter 2024
• Extra Material
• w01 - Introducing our tech stack
  • Course Setup
  • Getting started with our first APIs
  • API Deployment at Render
• w02 -
• w03 - HTTP Requests & Dev Tools (and, Linters and Formatters)
  • Linters and Formatters
• w04 - API Documentation
  • API Documentation
  • Swagger
  • Other Options
  • Extra
• w05 - REST & JSON Alternatives
• w06 - Validation & Error Handling
  • Validation
  • Error Handling
  • Extra
• w07 - OAuth
  • Explanation
    • Authentication Overview
    • OAuth Introduction
    • OAuth2 Vs OAuth1
  • Hands On
    • Getting Started with OAuth
    • Node.js API + OAuth + MongoDb
  • Extra
• w08 - OAuth
  • Explanation
    • OAuth and Swagger
    • JSON Web Tokens (JWT)
    • JWT meets OAuth
  • Extra
• w09 - API Gateways and Managers
  • What Is An API Gateway?
  • Popular API Gateways and Managers
• w10 -
• w11 -
• w12 -
• w13 -
• Resources
• PROJECT IDEA: CMS (Content Management System)
  • Readings

• User implementation 🔗📺

• Lesson 01 🔗
• Videos:
  • Intro: https://youtu.be/bUKgMUl5JyU
  • VS Code: https://youtu.be/5FE7L8syBm4
  • How to Install GIT on Windows, MacOS and ChromeOS: https://youtu.be/idN0wJqVTyo
  • CSE 341 MongoDB setup (January 2023): https://youtu.be/g4V7n86mMr0
  • Deploy Node js API with Env Variables on Render Automatically with GitHub Deploys: https://youtu.be/68ubggfsQlE
  • Create Github Repository and save all your code there: https://youtu.be/bLPPQ0R5hj0
  • Node and Express Tutorial: https://youtu.be/K00J87SofEc

• Visual Studio Code 🔗
• Microsoft Teams 🔗
• Node.js 🔗
• YouTube Recorders: Zoom, Loom, Screencastify, screencast-o-matic, OBS Studio, best screen recorder for Windows 🔗
• Git 🔗
  • Add to the PATH on Windows 10 and Windows 11 🔗
• GitHub 🔗
• MongoDB Atlas 🔗

• Building the API with Node.js
  • (OPTIONAL) JavaScript Tutorial for Beginners: Learn JavaScript in 1 Hour 🔗
  • Node and Express Tutorial 🔗
  • Node docs 🔗
  • (OPTIONAL) YouTube: Node.js Tutorial for Beginners: Learn Node in 1 Hour 🔗
  • (OPTIONAL) YouTube search: nodejs for beginners 🔗
  • Even a simple web search like "nodejs web server example" can be extremely helpful. 🔗
• Saving to GitHub
  • How to add a new project to Github using VS Code 🔗
  • Youtube: Create Github Account and Repository From Existing Code Using VS Code 🔗

• What is API Deployment? A2 Hosting, Heroku, Amazon Web Services, DigitalOcean, Glitch, Google Cloud Platform, Microsoft Azure, Platform.sh, NodeChef, Render, Fly, Railway, Vercel, - Render
• Render 🔗
  • Deploy a Node Express App 🔗
  • Environment variables and config vars Setup 🔗
  • Environment Variables and Secrets 🔗
• Testing your deployed API
  • REST Client in VSCode 🔗

• Lesson 02 🔗

• Lesson 03 🔗

• VSCode ESLint, Prettier & Airbnb Style Guide Setup 🔗
  • eslint.org/docs/latest/ 🔗
• VS Code Autoformatter - Configuring Prettier 🔗
• Setup ESLINT and PRETTIER in React app 🔗

• Lesson 04 🔗

• (OPTIONAL) Youtube: Intro to API Documentation 🔗
• What is API Documentation, and Why It Matters? 🔗

• What is Swagger? 🔗
• Create swagger.json from scratch (Design First) 🔗
• Create swagger.json npm package (Development First) - swagger-autogen 🔗
  • Swagger Autogen Docs 🔗
• swagger-ui-express 🔗

• Be aware that there are other resources for doing very similar types of API documentation. None of them appear to be as widely integrated with npm or as widely used in industry. Two other popular ones are Postman (which started off as just a rest client), and Readme. We will only use Swagger in this course.

• Repo: davibaltar/example-swagger-autogen 🔗

• Lesson 5 🔗

• Lesson 6 🔗

• What is Data Validation? 🔗
• A Clean Approach to Using express-validator 🔗
  • https://express-validator.github.io/docs/
• validatejs
  • ./helpers/validate.js 🔗
  • ./middleware/validate.js 🔗
• Validation in Node js Express Rest API 🔗
• 📺 7 - JOI Validation Schema to validate request body | Node JS API Authentication 🔗

• Node.js Error Handling Made Easy: Best Practices On Just About Everything You Need to Know 🔗
• Cleaner code in an Express REST API with unified error handling 🔗
• 📺 Handling API Errors | RESTful API using NodeJS and MongoDB 🔗
  • https://github.com/trulymittal/Nodejs-REST-API

• From teacher:
  • user.js 🔗
  • Error handling video 🔗
  • validate.js video 🔗
• How to handle data validation in Node.js using validatorjs 🔗
• validation-express
  • ValidationChain explanation 🔗
  • ValidationChain API 🔗
  • ARE YOU OVERUSING EXPRESS-VALIDATOR’S CUSTOM VALIDATOR? 🔗

• Lesson 7 🔗
  • Class Solution 🔗

• Website Authentication: The Complete Guide with FAQs 🔗
  • A Modern Password: 6 Top Tips for A Secure Login Process 🔗
• RESTful API Authentication Basics 🔗
  • Basic access authentication 🔗
  • Intuitive Api Designer 🔗 🤔
• Authorization vs Authentication 🔗
  • OAuth 2.0 Playground 🔗

• What is OAuth? Definition and How it Works 🔗
• What the Heck is OAuth? 🔗
  • Enter OpenID Connect, aka OIDC (OAuth 2.0 extension) 🔗 - OIDC was made famous by Google and Microsoft, both big early adopters. Okta has made a big investment in OIDC as well.
  • OAuth 2.0 and OpenID Connect (in plain English) 🔗 📺 1h

• What’s the difference? OAuth 1.0 vs OAuth 2.0 🔗
• Differences Between OAuth 1 and 2 🔗
• OAuth 2.0: Benefits and use cases — why? 🔗

• Simplified Oauth 2.0 Tutorial - Example with Node.js 🔗 📺 ~11m
• Google OAuth Docs - Node.js quickstart 🔗

• Node.js App From Scratch | Express, MongoDB & Google OAuth 🔗 📺 2h 28m
• OAuth (Passport.js) Tutorial #12 - Saving User to MongoDB 🔗 📺 ~10m

• NodeJS & Express - Google OAuth2 using PassportJS 🔗 📺 ~20m
• Lesson 7 Class Activity Walkthrough: Auth0 + Google 🔗
• User model implementation:
  • GitHub Code Repo 🔗
  • Video From Teacher 🔗

• Lesson 8 🔗
  • Class Solution 🔗

• OAuth 2.0 🔗
  • The OAuth 2.0 Authorization Framework - fc6749 🔗
• OAuth 2.0 configuration 🔗

• Introduction to JSON Web Tokens 🔗
  • JSON Web Token (JWT) - fc7519 🔗
• What is JWT and how does it work? 🔗
  • API Basics For the Enterprise 🔗
  • API Security Best Practices 🔗
• (OPTIONAL) YouTube: What Is JWT and Why Should You Use JWT 🔗 📺 ~15m
  • JWT Authentication Tutorial - Node.js 🔗 📺 ~27m
  • JWT Playground 🔗

• OAuth vs JWT (JSON Web Tokens): An In-Depth Comparison 🔗
  • Revoking Access to JWT tokens with a Blacklist/Deny List 🔗
  • OAuth 2.0 vs Session Management 🔗
• API Keys vs OAuth Tokens vs JSON Web Tokens 🔗

• Top 3 Things You Should Know About Webhooks! 🔗
• Passportjs:
  • Passport-GitHub2 🔗
  • Code example for passport-github 🔗

• Lesson 9 🔗
  • GitHub source code 🔗

As your API scales, you start to run into questions like "How can I control who makes requests to it and how many requests can they make? How can I make sure the interface with the frontend stays the same while the backend is being updated? How can I handle influxes of requests?" API management tools exist to help with questions like these. One of these tools is an API gateway. API gateways serve as a middle layer to go between your API and the clients that use it.

• (OPTIONAL) YouTube: What is API gateway really all about? 🔗
• Microsoft Tutorial: Hello World: API Management 🔗
• 14 Open Source and Managed API Gateway for Modern Applications 🔗
• Understanding the API Gateway: When You Need It and How to Implement It 🔗

An API Gateway acts as a middle layer between your API services and the clients that use them. Here are some popular solutions out there today:

• WSO2 🔗
• Azure API Management 🔗
• Amazon API Gateway 🔗
• Kong 🔗
• Tyk 🔗
• KrakenD 🔗
• Gloo Edge 🔗
• Express Gateway 🔗

• Lesson 10 🔗

• Lesson 11 🔗

• Lesson 12 🔗

• Lesson 13 🔗

• GitHub OAuth Apps - https://github.com/settings/developers
• supertokens/supertokens-core - https://github.com/supertokens/supertokens-core
• OpenAPI Guide - https://swagger.io/docs/specification/basic-structure/

• A CMS software application allows users to create, manage, and publish digital content like articles, images, and videos.

• https://github.com/totaljs/cms/tree/master

  

• https://blog.tooljet.com/build-cms-using-lowcode-and-mongodb/