Node.js: Securing RESTful APIs (2020)

API是将数据传递到您的应用程序的关键业务驱动程序。在本课程中，了解用于保护RESTful API的各种选项，这些选项可以帮助您确保应用程序数据和用户的安全。讲师Emmanuel Henri首先概述了主要的安全威胁，并介绍了开放Web应用程序安全项目（OWASP），这是有关安全的重要资源。然后，他逐步介绍如何设置和保护Node and Express API，包括如何添加用于注册和登录的处理程序，如何确定安全的端点以及如何测试您确定的API。最后，他分享了一些保护API的替代方法。

MP4 | Video: AVC, 1280×720 30 fps | Audio: AAC, 48 KHz, 2 Ch | Duration: 58m 12s
Skill Level: Advanced | Genre: eLearning | Language: English + Subtitles | Size: 554 MB

APIs are a crucial business driver for delivering data to your applications. In this course, learn about various options for securing your RESTful API that can help you keep your application data—and your users—safe. Instructor Emmanuel Henri begins the course with an overview of top security threats and an introduction to the Open Web Application Security Project (OWASP), an important resource on security. He then steps through how to set up and secure a Node and Express API, including how to add handlers for registration and login, finalize secured endpoints, and test your finalized API. To wrap up, he shares a few alternatives for securing APIs.

Topics include:

Open Web Application Security Project (OWASP)
Reasons for using a JSON Web Token (JWT)
Adding bcrypt password hashing
Adding handlers for registration and login
Finalizing secured endpoints
Testing APIs with Postman