Web Authentication With Golang - Google's Go Language (Udemy.com)

This is a very below standard course for Go in 2023. You're essentially watching two instructors design this course as you follow along. There is almost 2 hours wasted having the instructors work on a course outline document, updating a Git repo, and re-explaining concepts for a 3rd or 4th time while the course evolves. For a paid course, there should be a thoughtful project that provides some serious building blocks for what you're learning. This course just hacks together some proof of concept code, and leaves you with nothing - especially when the industry says not roll your own authentication. This course should try to prove otherwise instead of mutually agreeing at the end saying "this stuff is complicated!". I would look elsewhere...

The content is okay in general, could be more concise. The presentation format of the course is - positively spoken - unusual. Looks more like somebody recorded a bunch of pair programming sessions, there is much research and experimenting within the lessons that might have been done before. To stress that: In part 18 one of the lecturers was not even able to write down a simple for-loop...

The course was great and quite useful! In my humble opinion it would have been perfect if there was more information about the OAuth2 flow: refresh tokens and how to handle errors if the external provider returns them(error_code url parameter). Overall, the course exceeded my expectations and the teachers were awesome.

This course is truly amazing. I have been able to recite the authorization code grant flow for years and have created custom OAuth2 servers via the now deprecated Spring Authorization server library. That worked well for internal applications but alas it was deprecated for a reason and there are better, more versatile, options available from opensource and cloud providers. The issue, however, is when it comes to actually integrating with third-party providers. The resources on the internet are woefully insufficient and I have microservice security books that only give haphazard examples or a single (often no longer used) grant flow. I have also spent more time than I would like to admit trying to conceptually connect the OAuth2 grant flow diagrams to the settings and configurations within these third-party identity providers... Enter this course... All of your problems are about to go away. Well, maybe not, but this really filled in the gaps and put all the pieces together. During the course I used a local installation of Keycloak as the OAuth identity provider and was able to accomplish what I have been trying to on and off for ages. If you have been frustrated and confused by poor resources on the subject, get this course! I also want to acknowledge that these two approached an extremely complex subject that has very few quality resources. The creation of this course was an admirable endeavor and the quality is fantastic. The depth of understanding on the subject matter that Daniel brought combined with the academic professionalism, and inquisitive "how does it really work?" nature, added by Todd created an exceptionally fruitful and beneficial learning experience. Great work!

I loved the way that Todd and Daniel taught the course content. I've been able to learn how to properly manage passwords, understand JWT (which is something I've used but I didn't really know what that was) and oAuth2 (which I thought it was something hard to implement), and learn about HMAC which is something I didn't know until I completed that section from this amazing course. The concepts were explained clearly and the examples and exercises were very helpful. Thank you very much Todd and Daniel! You guys rock :)

The topic is really uncharted territory and difficult to learn and study by yourself. Especially off of documentation if you don't have extensive knowledge of JWT/HMAC/OAUTH2 in Java-Spring for instance, already. Todd and Daniel are presenting Go Authentication in a way that makes taking notes redundant - presuming you go over it in it's entirety. Todd's interactiveness and pedagogical skills are truely a blessing. I would just get stuck and had to rewatch it all the time if it weren't for that.

I liked how the professor encourages and connects to the listeners, I also liked the insights that Daniel gave in all sections. The course has valuable information and touches on many interesting topics but it is very diluted - it feels like watching preparation to a course rather than the course itself. I believe that if, based on this preparation, the author was to create a 4 hour course leaving out all the real-time typing of the code, typing of the presentation itself, git commands, and other things which distract and waste time, then it could be a really great course.

Too many irrelevant conversations and time wasted. No helpful theoretical background is given. The examples are unusable and are not documented. Where can I download the code from? the Github link is empty. Questions are left unanswered. 11 questions in such a course - says it all. I bought some of the teacher courses. This course is not his best course...

I am sad to write this poor review for a course with Todd because I really liked his previous courses. This one however is diffrent. It seems like Todd and Daniel are "creating" the course as we are watching it. (Typing out the course material in google docs, setting the git tags in every video while we are still watching...) Also, Daniel seems to know quite a bit about go but I am not sure how deep his understanding of the diffrent auth-mechanisms is. It seems like he has done these things maybe once or twice, which is imo not enought to create an "expert" course about the topic. So this one really has a lot of room to improve sadly :(

This is a fairly complex topic to tackle. The wonderful thing about it is simply this; as a person trying to advance your skills, you always feel like there are some secrets you don't know. Every course does the beginner journey and they never let you see how the really nitty-gritty things that are done in production at companies. When you get hired at one of those companies you're somehow expected to know what Daniel clearly knows. The problem is your skillset is where Todd pretends to be. He's a stand-in for your ignorance and he goes through the pain of acquiring the knowledge. If you take this course, you'll at least walk into a job interview with an idea of how to build a fairly high-level authentication system for a web app. If you want, you can watch this course and then create API servers that issue out JWT tokens for mobile phones to use in iOS or Android applications. All in all, don't let Todd's pretending to not know fool you, he's just your stand-in for a beginner as you journey towards becoming Daniel. If you take this course you will walk into any job interview head and shoulders above your competition.