MENU

Fun & Interesting

Node.js Security Best Practices: JWT blacklisting, rate limiting, schema validation

Software Developer Diaries 30,612 lượt xem 1 year ago
Video Not Working? Fix It Now

Get Docuo to create a knowledge base now: https://bit.ly/45LYSF5
======⚡⚡⚡======

Security best practices have to be known for developing secure Node.js applications and APIs. In this video (series) we're gonna cover rate limiting, JWTs, password encryption and other things.

🙌 Become my Patreon and get exclusive perks: https://patreon.com/softdevdiaries
💼 Follow me on LinkedIn and drop me a message if you'd like: https://linkedin.com/in/gusgadirov
💻 Also, let's connect on GitHub: https://github.com/gusgad

📚 Resources:
Express rate limit library: https://www.npmjs.com/package/express-rate-limit
nginx configuration for rate limiting: https://www.nginx.com/blog/rate-limiting-nginx/
Rate limiting on AWS: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-rate-based-request-limiting.html
bcrypt library: https://www.npmjs.com/package/bcrypt
Revoking a JWT access: https://supertokens.com/blog/revoking-access-with-a-jwt-blacklist
JSON schema validation library: https://www.npmjs.com/package/jsonschema?activeTab=readme
escape-html library: https://www.npmjs.com/package/escape-html
Sequalize ORM: https://sequelize.org/
mogoose DRM: https://www.npmjs.com/package/mongoose
eslint-plugin-security: https://github.com/eslint-community/eslint-plugin-security

🕒 Timestamps:
0:00 Intro
0:30 Rate limiting
2:42 Password encryption
4:05 Docuo
6:13 JWT blacklisting
8:40 Schema validation
9:24 HTML & CSS escaping
10:01 ORMs/DRMs
11:17 Linter plugins for security

And don't forget to subscribe for more videos like this 😊

Comment