Securing Applications in Node.js (Udemy.com)

Protect your Node.js application data from common attacks

Created by: Packt Publishing

Produced in 2018

icon
What you will learn

  • Discover common attacks on web applications such as XSS and CSRF and ways to mitigate them.
  • Rate-limit your APIs to prevent abuse.
  • Build a user registration, login, and password reset flow.
  • Add two-factor authentication to let security conscious users further protect themselves.
  • How to do passwordless authentication via magic links in emails.
  • How OAuth and OpenID allow you to authenticate users via third-party services.

icon
Quality Score

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 40 / 100

icon
Course Description

Everyone agrees that web application security is very important but there are very few to take it seriously. There have been lots of high-profile instances of websites having their password databases exposed to the World (e.g. Ashley Madison and Adobe). You don't want the application you are building to be the next big security horror story. This course will get you up-to-speed on the key attack vectors, quickly covering issues such as cross-site scripting, CSRF, and SQL injection. It will provide you with clear, practical approaches to mitigating these problems. It will show you how to implement OAuth and two-factor authentication for the additional protection of users who need it. Further, we will delve into the critical process of adding secured, well-thought-out authentication and authorization to a Node.js application. After completing this course, you should be confident in your ability to make an application secure with Node.js and keep your data protected.
About The Author
Forbes Lindesay is an experienced JavaScript developer. The author has made substantial contributions in the Node.js open source community. The author has spent four years building web applications in the industry, first at Redgate then at Facebook. Forbes likes the way new techniques allow us to write more complex, and more reliable software, faster than ever before, and wishes to contribute back to the community with his ability and experience garnered over the years.Who this course is for:
  • Node. js developers who want to build secure applications and would like to learn key app security principles.

icon
Instructor Details

placeholder

Packt has been committed to developer learning since 2004. A lot has changed in software since then - but Packt has remained responsive to these changes, continuing to look forward at the trends and tools defining the way we work and live. And how to put them to work.
With an extensive library of content - more than 4000 books and video courses -Packt's mission is to help developers stay relevant in a rapidly changing world. From new web frameworks and programming languages, to cutting edge data analytics, and DevOps, Packt takes software professionals in every field to what's important to them now.
From skills that will help you to develop and future proof your career to immediate solutions to every day tech challenges, Packt is a go-to resource to make you a better, smarter developer.

Packt Udemy courses continue this tradition, bringing you comprehensive yet concise video courses straight from the experts.



icon
More courses by Packt Publishing

.NET Core Microservices

$11.99

JavaScript Design Patterns: 20 Patterns for Expert Code

$11.99

Mastering Go Programming

$11.99

Learning Path: Automation with Ansible, Puppet, and Salt

$11.99

Learning Path: Magento: Master and Test Magento 2 with Ease

$11.99

DevOps Fundamentals with Azure

$11.99

icon
More node.js courses

All about NodeJS

$11.99

Web Scraping in Nodejs

$11.99

The Complete Web Developer in 2021: Zero to Mastery

$11.99

Node.js, Express, MongoDB & More: The Complete Bootcamp 2021

$11.99

Node.js API Masterclass With Express & MongoDB

$11.99

Just Express (with a bunch of node and http). In detail.

$11.99

icon
Reviews

2.0

1 total reviews

5 star 4 star 3 star 2 star 1 star
% Complete
% Complete
% Complete
% Complete
% Complete

By Artur J. Zapater

This course has helped me understand the basics of how some common attacks work. That's it. The solution the author gives to every problem is using this or that library. Not even once does he have you build a simple protection against an attack so that you understand how it works.

Other than that, this course is basically an excuse to push the author's own libraries on you. His libraries are poorly maintained. He is the only author and they haven't been updated in 1-2 years. At the moment of writing this review, the section on using Google OAuth is impossible to complete because the author's library uses a deprecated API.

Honestly, this course feels like an excuse to get people to use the author's own libraries, rather than an honest attempt at teaching security.