Node.js security

Question

I am building a basic app using node.js and mysql and just getting a hang of it, I would like to secure the api,like only allow certain people to access the data, maybe by passing a certain token each time a user requests for some information, I tried searching for certain tutorials which used node.js and mysql database and security, I am confused as to which security measure to use, I even read about Json Web Tokens but din't find a proper tutorial for that.Please point me in the right direction.

EDIT

What I meant to say was, only authenticated users are allowed to get access to data in the api, when a random visitor tries to access a URL he shouldnt be alowed to without proper authentication,what I am mostly looking for now is when a user is authenticated the user should be a sent a token of some sort so then gets access to private data,I don't exactly know how to go about this whole thing.Would be glad if you could clear it up for me.

Questions asking us to find an off-site resource are offtopic. Not to mention your question is very broad. What are you trying to secure against exactly? — ʰᵈˑ
– ʰᵈˑ, Commented Jun 10, 2015 at 14:53

Softinio · Accepted Answer · 2015-06-10 15:20:16Z

1

I would look at implementing Oauth2 server in your app. I found this article useful:

http://blog.papersapp.com/oauth-server-in-node-js/

answered Jun 10, 2015 at 15:20

Softinio

6681 gold badge7 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Hyo Byun · Accepted Answer · 2015-06-11 02:49:04Z

0

Take a look at http://passportjs.org/ . Passport has support for alot of authentication methods, however, for your API, you will probably want to use OAuth (http://passportjs.org/docs/oauth2-api). OAuth is what most popular APIs use to authenticate consumers.

For simple projects, You can also use basic authentication, which is what you see when you see the browser prompt asking for username and password. This authentication information can be sent in the header when API consumers makes requests.

answered Jun 11, 2015 at 2:49

Hyo Byun

1,27610 silver badges19 bronze badges

Collectives™ on Stack Overflow

Node.js security

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related