Securing Your Application
In many cases, a prerequisite for a web application is to secure it before you put it in production. There are definitely cases where you don’t need to do that, but in most cases, you want to make sure that your application is secure and that only authorized users can access certain parts of it.
Let’s look at some scenarios and what security measures you should consider for each of them:
|
Scenario |
Sensitivity level |
Security measures |
Rationale |
|
Public data that anyone can access |
Minimal risk of exposure |
Basic security or none |
If you want to prevent bots or similar from using your API excessively, opt for having users sign up for an API key ... |
