This chapter covered three important things: how to control the amount of data that we publish, how to secure our app, and how to better integrate with an external API. We learned a pattern to build pagination that functions with filters as well. Then we learned how to build user roles and schemas to secure access to our application better. Next, we understood the limitations of allow/deny rules and addressed these limitations by writing effective deny rules. We quickly realized these deny rules were blocking functions from all the event handlers because they are insecure. To get around this limitation, we learned how to build trusted code. Towards the end, integrating Stripe taught us how to create a nonblocking synchronization function and how to use restivus to catch incoming messages from external servers.

The next chapter is going to cover the basics of how to test and maintain our code. With the next chapter, we will be able to share our code without fearing that someone else...