AI

ACE AI Startup Bootcamp

Creating Member Services (User Management)

πŸ“– View Session 8 practice lesson plan ← Return to Curriculum page
Day 8 Creating Member Services (User Management) Video + AI chatbot learning

Creating Membership Services (User Management) Learning Assistant

Membership registration and login are the gateway to all services. In this course, we go beyond simply implementing authentication by mechanically copying and pasting a complex technical encryption library. Using Codex AI as a coach and simulated customer persona, design the optimal sign-up onboarding function (Task 01), identify the reasons for leaving the input form field and draft a step-by-step flow reduction (Task 02), verify the consistency guard and email format filter to block duplicate sign-ups (Task 03)Implement . In addition, we assemble a form manipulation indicator corrector (Mission 01) for the first silver tier and a failure feedback integrated quality report (Mission 02) to silence the exposure of brute force hacking hints.

Audience: Students who have built static publishing pages and basic functionality.
What you need: Laptop, VS Code, web browser
Composition: 2 hours theory / 3 hours practice / 1 hour sharing
πŸ“– Go to Session 8 teaching plan

πŸš€ Day 8 Practice MVP Tasks Roadmap

Go to the entire Task board β†’
TASK 1
Planning

Task 1. Design membership function

Take a service overview and develop an implementation checklist that clearly demarcates required base features and optional extensions.

Task 1 Entry to the lab
TASK 2
UX Flow

Task 2. Review member functions from a user perspective

We plan a design for dividing form input by point in time to eliminate low sign-up completion rates and password reset barriers.

Task 2 Entry to the lab
TASK 3
Integrity

Task 3. Check membership functions

Duplicate subscriptions for identical emails Code broken data and safe email regex validation guard.

Task 3 Entry to the lab
MISSION 1
QA Review

Mission 1. Become a first-time user

It audits simulated inflow failure points for digitally underprivileged groups and applies real-time guidance notifications and blur redundancy filters.

Mission 1 Lab Entry
MISSION 2
Usability Metric

Mission 2. Evaluate member service quality

We obtain a multi-dimensional rating and comprehensively correct security weaknesses that provide hints to hackers by exposing the detailed reason for login failure.

Mission 2 Lab Entry

Day 8 lecture video

YouTube Recommended Lectures
This is a list of recommended YouTube lectures corresponding to the core topics of the Day 8 curriculum (JWT, authentication/authorization, bcrypt, RBAC, social login). (Constructed of free lecture videos that allow external sharing and playback.)
πŸ“š Full list of lectures (5)
  • β–Ά
    1. Node.js-Cookies and Authentication - 9.1. Introduction to certification implementation (life coding)
    5:30
  • β–Ά
    2. Node.js-Cookies and Authentication - 9.3. Login processing and cookie creation (life coding)
    8:40
  • β–Ά
    3. Node.js-Cookies and Authentication - 7. Secure & HttpOnly Cookie Security (Life Coding)
    9:15
  • β–Ά
    4. Node.js-Cookies and Authentication - 9.7. Access control and authority management (life coding)
    7:40
  • β–Ά
    5. WEB2 - OAuth 2.0 - 1. Introduction (Life Coding)
    8:12

Key takeaway notes

Day 8 Summary

Today's Key Goals

On Day 8, we work with Codex AI scenario coaches to plan the onboarding sign-up experience for the new service, moving member features that eliminate friction-inducing form fields, and security verification.

  • Get priority for member features: Establish an implementation schedule by distinguishing between required base features and optional extensions
  • Reduce onboarding input friction: Streamline 12+ fields and switch to staggered distributed collection
  • Duplicate Account Integrity Guarding: Duplicate subscription check `some()` variable and mail format regular expression verification included
  • Novice user emotion simulation: Real-time feedback verification of input rules with AI assigned to a silver persona in his 60s
  • Hiding login failure information: Prevent the risk of account takeover by incorporating detailed separation instructions for ID/password failure
Study tip: Ask the AI chatbot on the right, β€œWhat is the difference between Access Token and Refresh Token in JWT token-based login?” or β€œHow do I handle password hashing and verification on the backend with the bcrypt library?” Ask the same question.