Implementing Security, Encryption, and Authentication | Node Cookbook: Second Edition

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Node Cookbook: Second Edition

By : David Mark Clements

4.3 (7)

Node Cookbook: Second Edition

4.3 (7)

By: David Mark Clements

Overview of this book

Node Cookbook Second Edition

Node Cookbook Second Edition

Credits

Credits

About the Author

About the Author

About the Reviewers

About the Reviewers

www.PacktPub.com

www.PacktPub.com

Preface

Preface

Free Chapter

Making a Web Server

Making a Web Server

Introduction

Setting up a router

Serving static files

Caching content in memory for immediate delivery

Optimizing performance with streaming

Securing against filesystem hacking exploits

Exploring the HTTP Object

Exploring the HTTP Object

Introduction

Processing POST data

Handling file uploads

Using Node as an HTTP client

Implementing download throttling

Working with Data Serialization

Working with Data Serialization

Introduction

Converting an object to JSON and back

Converting an object to XML and back

Browser-server transmission via AJAX

Working with real data – fetching trending tweets

Interfacing with Databases

Interfacing with Databases

Introduction

Writing to a CSV file

Connecting and sending SQL to a MySQL server

Storing and retrieving data with MongoDB

Storing data to CouchDB with Cradle

Retrieving data from CouchDB with Cradle

Accessing the CouchDB changes stream with Cradle

Storing and retrieving data with Redis

Implementing PubSub with Redis

Employing Streams

Employing Streams

Introduction

Consuming streams

Playing with pipes

Making stream interfaces

Streaming across Node processes

Going Real Time

Going Real Time

Introduction

Creating a WebSocket server

Cross-browser real-time logic with Socket.IO

Remote Procedure Calls with Socket.IO

Creating a real-time widget

Accelerating Development with Express

Accelerating Development with Express

Introduction

Generating Express scaffolding

Managing server tier environments

Implementing dynamic routing

Templating in Express

CSS preprocessors with Express

Initializing and using a session

Making an Express web app

Implementing Security, Encryption, and Authentication

Implementing Security, Encryption, and Authentication

Introduction

Implementing Basic Authentication

Hashing passwords

Implementing Digest Authentication

Setting up an HTTPS web server

Preventing cross-site request forgery

Integrating Network Paradigms

Integrating Network Paradigms

Introduction

Sending an e-mail

Sending an SMS

Communicating with TCP

Creating an SMTP server

Implementing a virtual hosting paradigm

Writing Your Own Node Modules

Writing Your Own Node Modules

Introduction

Creating a test-driven module specification

Writing a functional module mock-up

Refactoring with prototypical inheritance

Extending a module's API

Deploying a module to npm

Taking It Live

Taking It Live

Introduction

Deploying an app to a server environment

Automatic crash recovery

Continuous deployment

Hosting with a Platform as a Service provider

Index

Index

Implementing Digest Authentication

Digest Authentication combines Basic Authentication with MD5 encryption, thus avoiding the transmission of plain text passwords, making for a more secure login method over plain HTTP.

On its own, Digest Authentication is still insecure without an SSL/TLS-secured HTTPS connection. Anything over plain HTTP is vulnerable to the man-in-the-middle attacks, where an adversary can intercept requests and forge responses. An attacker could masquerade as the server, replacing the expected digest response with a Basic Authentication response, thus gaining the password in plain text.

Nevertheless, in the absence of SSL/TLS, Digest Authentication at least provides some defense in the area of plain text passwords requiring more advanced circumvention techniques.

So in this recipe, we will create a Digest Authentication server.

Getting ready

To begin with, we simply create a new folder with a new server.js file.

How to do it...

As in the Basic Authentication with Express recipe...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Node Cookbook: Second Edition

Search

Your notes and bookmarks