Book Image

Advanced Express Web Application Development

By : Andrew Keig
Book Image

Advanced Express Web Application Development

By: Andrew Keig

Overview of this book

Building an Express application that is reliable, robust, maintainable, testable, and can scale beyond a single server requires a bit of extra thought and effort. Express applications that need to survive in a production environment will need to reach out to the Node ecosystem and beyond, for support.You will start by laying the foundations of your software development journey, as you drive-out features under test. You will move on quickly to expand on your existing knowledge, learning how to create a web API and a consuming client. You will then introduce a real-time element in your application.Following on from this, you will begin a process of incrementally improving your application as you tackle security, introduce SSL support, and how to handle security vulnerabilities. Next, the book will take you through the process of scaling and then decoupling your application. Finally, you will take a look at various ways you can improve your application's performance and reliability.
Table of Contents (14 chapters)
Advanced Express Web Application Development
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Securing our site with HTTPS


In order to make our site secure, we will run the entire application under HTTPS. We will need two files: a PEM encoded SSL certificate ./lib/secure/cert.pem, and a private key ./lib/secure/key.pem. In order to create an SSL certificate, we first need to generate a private key and a certificate signing request (CSR). For development purposes, we will create a self-signed certificate. Run the following commands:

cd ../vision/lib/secure
openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout key.pem -out cert.pem

Upon running the second command, you will enter an interactive prompt to generate a 2048-bit RSA private key and a certificate signing request (CSR). You will need to enter various pieces of information including address details, common name or domain name, company details, and an email address.

Let's add a module, ./lib/express/server.js, that will create a HTTP server based on the key/cert we have just created. We import the https module, read...