API Security
Our API can now store data in a database; consequently, it’s time to start talking about security. As soon as you store data, you must store it securely. That means you are storing the correct data, accessed only by the right people, and the data is always available. Security is not only critical, but also a very complex subject. The security field is constantly evolving, and attackers are finding new and different ways to attack systems as technologies evolve and change. Trying to cover all the security concepts in a chapter of a book is not realistic, so I’m going to cover the most important ones related to API development, including the following:
- How to validate and sanitize your inputs
- How to handle and store passwords
- How to leverage HTTP protocol security features
- How to encrypt your communication with TLS using
Let's Encrypt
Also, as in previous chapters, we will integrate these concepts into our API, adding...
