cookies - Securing my single-page-app. Fuck it. Fucking how? Fuck. - devRant

Ranter

Comments

1

code-god

1962

9y

Use APIs with JWT
0

nikolatesla

16094

9y

@code-god thanks. a hacker inserted thousands of documents into my database. that freaked me out.
0

tahnik

38541

9y

@nikolatesla I would use cloud functions to verify the data before inserting into my database.
0

yusijs

1245

9y

Yes, use jwt - most frameworks has plugins for it, and (mostly) easy on the backend as well, depending on your stack.
1

Tribex

67

9y

Sure, JWTs are great, and fairly simple, but make sure you know what you're doing first, as if you don't you can easily shoot yourself in the foot. Don't worry, the theory behind it is really easy to grasp.
2

yusijs

1245

9y

Yeah, what @Tribex said cant be stressed enough - jwt's can be faked easily, so make sure they are validated serverside. :)
3

CodeMasterAlex

1147

9y

Always validate server side. Never ever trust user input, especially not when you have some (rest) api on back end.

Related Rants

devRant © 2021 Hexical Labs LLC
Privacy Policy | Terms of Service