Node.js: Securing RESTful APIs

58mAdvanced2020-02-06

Authors

Emmanuel Henri

Executive with 20+ years of experience in programming and design

Course details

APIs are a crucial business driver for delivering data to your applications. In this course, learn about various options for securing your RESTful API that can help you keep your application data—and your users—safe. Instructor Emmanuel Henri begins the course with an overview of top security threats and an introduction to the Open Web Application Security Project (OWASP), an important resource on security. He then steps through how to set up and secure a Node and Express API, including how to add handlers for registration and login, finalize secured endpoints, and test your finalized API. To wrap up, he shares a few alternatives for securing APIs.

Topics include:
- Open Web Application Security Project (OWASP)
- Reasons for using a JSON Web Token (JWT)
- Adding bcrypt password hashing
- Adding handlers for registration and login
- Finalizing secured endpoints
- Testing APIs with Postman

Skills covered

LoopBackExpress.jsNode.jsJavaScript FrameworksAPIsFull-Stack Web DevelopmentWeb DevelopmentOpen SourceSoftware DevelopmentDeep Dive (X:Y)

Concepts

0. Introduction

01 - Securing Node RESTful APIs
02 - What you should know

1. Setting Up

03 - Overview of the security threats
04 - Introduction to OWASP
05 - Introduction to JWT
06 - Introduction to Postman

2. Setting Up the Node API

07 - Base project template intro
08 - Finalize the setup for the project
09 - Create the user model
10 - Add bcrypt password hashing

3. Securing the Node API

11 - Add the handlers for loginRequired
12 - Add the handlers for registration
13 - Add the handlers for login
14 - Finalize secured endpoints
15 - Add JWT setup into index
16 - Test the API with Postman

4. Other Options

17 - Alternatives for securing APIs

Conclusion

18 - Explore and build your skills