How to make sure your Express API doesn't get abused

Making applications for the web is a lot of fun. Sadly, there is always a risk that bad actors will abuse them. Either using them too much or using them for nefarious means. For most hobby projects that isn't too much of a problem. Once we start deal...

h.kevincunningham.co.uk7 min read

#express #authentication #auth0 #nodejs #2articles1week

Responses(3)

OK

Olohundare kayode

To make sure your app doesnt get abused, You could also have a rate limiter that limit how many request a user can per hour. Here is a lib that solves that for you

npmjs.com/package/express-redis-limit-req

Javascript Developer

Sep 24, 2020

KC

Kevin Cunningham

Sep 24, 2020

Thanks for the work you're doing on this library!

MB

Maximilian Berkmann

Web and programming

Oct 1, 2020

Or using express-rate-limit or @authentication/rate-limit.

DC

Dwayne Charrington

Front-end developer

Sep 24, 2020

JWT's are definitely the way to go. I do recommend that developers work out how to implement them without a third-party service, though. Auth0 is great, but it's so expensive if you want to use it beyond a little hobby project. It's surprisingly easy to use the jsonwebtokens package to create your own implementations.

KC

Kevin Cunningham

Sep 24, 2020

Thanks Dwayne - helpful insight :)

Search Hashnode

How to make sure your Express API doesn't get abused

Responses(3)