cookies - Securing my single-page-app. Fuck it. Fucking how? Fuck. - devRant

Ranter

Comments

1

code-god

1990

7y

Use APIs with JWT
0

nikolatesla

16192

7y

@code-god thanks. a hacker inserted thousands of documents into my database. that freaked me out.
0

tahnik

38758

7y

@nikolatesla I would use cloud functions to verify the data before inserting into my database.
0

yusijs

1250

7y

Yes, use jwt - most frameworks has plugins for it, and (mostly) easy on the backend as well, depending on your stack.
1

Tribex

67

7y

Sure, JWTs are great, and fairly simple, but make sure you know what you're doing first, as if you don't you can easily shoot yourself in the foot. Don't worry, the theory behind it is really easy to grasp.
2

yusijs

1250

7y

Yeah, what @Tribex said cant be stressed enough - jwt's can be faked easily, so make sure they are validated serverside. :)
3

CodeMasterAlex

1188

7y

Always validate server side. Never ever trust user input, especially not when you have some (rest) api on back end.

Related Rants

devRant © 2021 Hexical Labs LLC
Privacy Policy | Terms of Service