Collaborate Disseminate
I have a website hosted by Apache on a Linux server. I also have a Node.js back-end/API that is hosted on the same server, which serves all the front-end’s requests. Today I set up SSL for the front-end and got an error that a request to t… Continue reading Should one use separate SSL certificates for front-end and back-end?
I have a website hosted by Apache on a Linux server. I also have a Node.js back-end/API that is hosted on the same server, which serves all the front-end’s requests. Today I set up SSL for the front-end and got an error that a request to t… Continue reading Should one use separate SSL certificates for front-end and back-end?
I have a special requirement, have gone through the site but have not found any matching my need. I want to secure:
DB Connection Credentials
Session Secret Key
Security Token, Encryption/Decryption Keys
3rd Party API crede… Continue reading How to secure important credentials (used in Node.js application code) in separate side utility
As a complete beginner in this area I am looking at various Access Control libraries for my javascript webapp (Vue.js PWA). I do not know if understand things correctly but it looks like there are libraries focusing on the ba… Continue reading How do javascript access control libraries work; and is a client solution not a security threat?
As a complete beginner in this area I am looking at various Access Control libraries for my JavaScript webapp (Vue.js PWA). I do not know if understand things correctly but it looks like there are libraries focusing on the ba… Continue reading How do JavaScript access control libraries work and is a client solution not a security threat?
Recently I had a debate with a fellow dev about where to store Node.js env vars.
I always use .env files and load these as proper ENV VARs at runtime, however my fellow dev uses JSON config files and loads them in as runtime… Continue reading Node.js ENV VAR Security
I want to play a little bit and create my own little password manager (with gpg) in node.js
My question is how I should keep those passwords:
In one encrypted file (let’s say in json format),
Separate file for every entry … Continue reading Own password manager. How to store passwords
Is it secure to assign the login token on the socket object? This would be done to avoid having to consistently send their tokens over an encrypted established WebSocket connection. The token would be sent after the connectio… Continue reading WSS assign login token on socket?
Is it secure to assign the login token on the socket object? This would be done to avoid having to consistently send their tokens over an encrypted established WebSocket connection. The token would be sent after the connectio… Continue reading WSS assign login token on socket?
Context: Angular site is hosted on S3 behind CloudFront, separate from Express server that is used as API and almost all requests are XMLHttpRequests. All requests are sent without cookies (withCredentials = false by default) and I use JWT… Continue reading Do I need CSRF token if I’m using Bearer JWT?