Source: thenewstack.io
Secure the Web with an API-Driven Backend for Frontend
https://www.linkedin.com/in/gary-archer-6b3613153/ Building and securing browser-based apps has always been a challenge. Threats such as https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html are a major concern, and a secure development life cycle must be followed to prevent them.
Even if your web apps do not yet use OAuth, it’s a best practice to only use secure cookies in the browser.
For any web architecture where cookies secure the app, you need distinct routes into APIs for each web app.
Implement a Backend for Frontend for each web app to issue secure cookies and aim to separate web and API concerns.
Even if your web apps do not yet use OAuth, it’s a best practice to only use secure cookies in the browser.
For any web architecture where cookies secure the app, you need distinct routes into APIs for each web app.
Implement a Backend for Frontend for each web app to issue secure cookies and aim to separate web and API concerns.
Related Articles
Community Partners
DevOps Careers