<?xml version="1.0" encoding="UTF-8"?><oembed><type>video</type><version>1.0</version><html>&lt;iframe src=&quot;https://www.loom.com/embed/171e7b8948bd418d91ef294ad8a723ae&quot; frameborder=&quot;0&quot; width=&quot;1280&quot; height=&quot;960&quot; webkitallowfullscreen mozallowfullscreen allowfullscreen&gt;&lt;/iframe&gt;</html><height>960</height><width>1280</width><provider_name>Loom</provider_name><provider_url>https://www.loom.com</provider_url><thumbnail_height>960</thumbnail_height><thumbnail_width>1280</thumbnail_width><thumbnail_url>https://cdn.loom.com/sessions/thumbnails/171e7b8948bd418d91ef294ad8a723ae-5e6920c0ccb626f5.gif</thumbnail_url><duration>296.989</duration><title>Implementing Secure User Authentication and Authorization in WTWR Application 🔒</title><description>Hi everyone, in this video, I walk you through my WTWR backend project for Sprint 13, where I implemented authentication and authorization using JWT and password hashing. I expanded the user schema to include email and password fields, ensuring passwords are hashed with bcrypt before saving. I also built middleware for protected routes, allowing users to only access their own data and handle errors like duplicate emails. I faced challenges with token verification and hiding the password field, but I resolved them effectively. I hope you find this overview helpful, and I look forward to your feedback!</description></oembed>