---
title: "Discussion on \"IDOR Vulnerabilities in NestJS: How to Build Ownership Guards That Actually Protect Your Data\" | Hashnode"
description: "Discussion on \"IDOR Vulnerabilities in NestJS: How to Build Ownership Guards That Actually Protect Your Data\". Your JWTs are working perfectly. Your database is leaking anyway — here's why authentication and authorization are not the same thing, and how to close the gap in NestJS + PostgreSQL"
url: "https://hashnode.com/posts/idor-vulnerabilities-in-nestjs-how-to-build-ownership-guards-that-actually-protect-your-data/6ab6a7119160c4403d21a3ff"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [IDOR Vulnerabilities in NestJS: How to Build Ownership Guards That Actually Protect Your Data](https://blog.zyvop.com/idor-vulnerabilities-in-nestjs-how-to-build-ownership-guards-that-actually-protect-your-data?utm_source=hashnode&utm_medium=feed)

Your JWTs are working perfectly. Your database is leaking anyway — here's why authentication and authorization are not the same thing, and how to close the gap in NestJS + PostgreSQL

Sep 25 · 15 min read · blog.zyvop.com  
Read the article

-   [#authorization](https://hashnode.com/tag/authorization)
-   [#backendsecurity](https://hashnode.com/tag/backendsecurity)
-   [#bola](https://hashnode.com/tag/bola)
-   [#idor](https://hashnode.com/tag/idor)
-   [#nestjs](https://hashnode.com/tag/nestjs)

## Written by

[ZyVOP](https://hashnode.com/@zyvop)

@zyvop · Delhi, India

  
[View profile](https://hashnode.com/@zyvop)

The Developer Publishing Hub

One platform to write, cross-post to Dev.to, Medium, WordPress, Hashnode, and Bluesky, and protect your SEO with canonical links. Zero paywalls and full content ownership.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.