{"podcast":{"title":"CyberCode Academy","slug":"cybercode-academy-7578615","podcast_index_feed_id":7578615,"rss_url":"https://www.spreaker.com/show/6790974/episodes/feed","website_url":"https://www.spreaker.com/podcast/cybercode-academy--6790974","image_url":"https://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/5f51ccc7b22fdba95149ffa6346f1533.jpg","author":"CyberCode Academy","episode_count":297,"summary":"Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity. 🎧 Each course is divided into a series of short, focused episodes that take you from beginner to advanced level — one lesson at a time. From Python and web development to ethical hacking and digital defense, our content transforms complex concepts into simple, engaging audio learning. Study anywhere, anytime — and level up your skills with CyberCode Academy. 🚀 Learn. Code. Secure. You can listen and download our episodes for free on more than 10 different platforms: https://linktr.ee/cybercode_academy","last_synced_at":"2026-07-13T14:17:20.596630+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615"},"episode":{"title":"Course 37 - Building Web Apps with Ruby On Rails | Episode 14: From Basic HTTP to JWT Authentication","slug":"course-37-building-web-apps-with-ruby-on-rails-episode-14-from-basic-http-to-jwt-authentication","published_at":"2026-06-27T06:00:06+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-37-building-web-apps-with-ruby-on-rails-episode-14-from-basic-http-to-jwt-authentication","show_page_url":"https://stenobird.com/podcast/cybercode-academy-7578615","url":"https://www.spreaker.com/episode/course-37-building-web-apps-with-ruby-on-rails-episode-14-from-basic-http-to-jwt-authentication--72405508","audio_url":"https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72405508/from_basic_auth_to_stateless_jwt.mp3","summary":"In this lesson, you’ll learn about: securing APIs in Rails, authentication strategies, and building a stateless authorization system1. Why API Security MattersUsing Ruby on Rails APIs:🔹 Problem: APIs are publicly exposed endpoints Without protection → anyone can access or manipulate data 🔹 Goal: Ensure only authorized users can interact with resources 👉 Key Insight An unsecured API is essentially a “wide-open backend”2. Foundation of API Design🔹 Core features: Multiple response formats (JSON) Pagination API versioning 🔹 Example:/api/v1/projects?page=1 👉 Key Insight Security must be designed alongside API structure—not added later3. Basic HTTP Authentication (Intro Level)🔹 Rails method:http_basic_authenticate_with name: \"admin\", password: \"secret\" 🔹 How it works: Sends username/password with every request 🔹 Problems: Credentials sent repeatedly Often stored or cached Vulnerable if not encrypted 👉 Key Insight Good for demos ❌ Not safe for production ❌4. Token-Based Authentication with JWTUsing JSON Web Token:🔹 Structure: Header Payload Signature 🔹 Example:xxxxx.yyyyy.zzzzz 🔹 Benefits: Stateless (no server session needed) Secure (signed token) Scalable 👉 Key Insight JWT is the industry standard for modern APIs5. Why JWT Is More Secure🔹 Advantages: No repeated credentials Token can expire Cannot be modified without secret key 🔹 Protection: Immune to CSRF (no cookies required) 👉 Key Insight Security comes from signature verification, not secrecy6. Implementing JWT in Rails🔹 Tool: JWT Ruby Gem 🔹 Encoding:JWT.encode(payload, secret_key) 🔹 Decoding:JWT.decode(token, secret_key) 👉 Key Insight The server is the only entity that can generate valid tokens7. Authentication Service🔹 Responsibilities: Handle signup Handle login Generate token 🔹 Flow: User logs in Server validates cre…","meta_description":"In this lesson, you’ll learn about: securing APIs in Rails, authentication strategies, and building a stateless authorization system1. Why API Security Ma…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1174,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-37-building-web-apps-with-ruby-on-rails-episode-14-from-basic-http-to-jwt-authentication/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-37-building-web-apps-with-ruby-on-rails-episode-14-from-basic-http-to-jwt-authentication.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}