3. Creating RESTful APIs | Mastering Web Application Development with Express

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Mastering Web Application Development with Express

By : Alexandru Vladutu

3.7 (3)

Mastering Web Application Development with Express

3.7 (3)

By: Alexandru Vladutu

Overview of this book

If you are a Node.js developer who wants to take your Express skills to the next level and develop high performing, reliable web applications using best practices, this book is ideal for you. The only prerequisite is knowledge of Node.js.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Diving into Express

1. Diving into Express

The best parts of Express

Comparing Express with other frameworks

Use cases

Express into the wild

The application structure

Summary

2. Component Modularity Using Middleware

2. Component Modularity Using Middleware

Connecting middleware

The functionality of middleware

Creating configurable middleware

Environment-based loading of middleware

Express routes

Ordering of middleware

Handling errors with middleware

Mounting subapplications

Replicating the middleware system

Summary

3. Creating RESTful APIs

3. Creating RESTful APIs

An overview of REST

SmartNotes application requirements

Creating RESTful URLs of the application

Implementing the SmartNotes application

API versioning

API rate limiting

Throttling

Facilitating caching

Content negotiation

Summary

4. Leveraging the Power of Template Engines

4. Leveraging the Power of Template Engines

The different types of template engines

View helpers and application-level data

Sharing code between templates with partial views

DRY templates with layouts

Template engine consolidation with consolidate.js

View caching in production

Integrating a template engine with Express

Choosing a template engine

Summary

5. Reusable Patterns for a DRY Code Base

5. Reusable Patterns for a DRY Code Base

Creating the MovieApp sample application

Error checks and callback functions

Tiny modules for better control flow

Ensuring a single callback execution

Extending objects in a reusable way

A simple way to create custom errors

Summary

6. Error Handling

6. Error Handling

Runtime (operational) errors and human errors

Ways of delivering errors in the Node applications

Strings instead of errors as an antipattern

Improving stack traces

Handling uncaught exceptions

Logging errors

Creating a custom Express error handler

Richer errors with VError

Error handling in a practical application

Summary

7. Improving the Application's Performance

7. Improving the Application's Performance

Serving static resources with Express

Backend improvements

Summary

8. Monitoring Live Applications

8. Monitoring Live Applications

Logging

Simple tips for improving the application monitoring

Collecting metrics

Useful existing monitoring tools

Ensuring the application uptime

Summary

9. Debugging

9. Debugging

A better error-handling middleware

Using a debug flag

Debugging routes and middleware

Using the V8 debugger

Debugging memory leaks

Adding a REPL to our Express application

Removing debugging commands

Summary

10. Application Security

10. Application Security

Running Express applications on privileged ports

Cross-site request forgery protection

Cross-site scripting

HTTP security headers with Helmet

Handling file uploads

Session middleware parameters

Reauthenticating the user for sensitive operations

Summary

11. Testing and Improving Code Quality

11. Testing and Improving Code Quality

The importance of having automated tests

Testing toolbox

Creating and testing an Express file-sharing application

Running tests before committing in Git

Code coverage

Complexity analysis of our code

Code linting

Load testing

Client-side testing

Continuous Integration

Summary

Index

Index

SmartNotes application requirements

In the remaining part of this chapter, we will create a RESTful API for a sample application called SmartNotes. This application will have two types of users: guests and registered users. Guests represent unauthenticated users that can perform the following actions:

Create a new username so they can manage their notes
Get the public details of a username
Retrieve a list of public (shared) notes that belong to a username
Get a specific public note of a username

Registered users will be authorized to use the HTTP basic authentication scheme, and they will be able to perform the following activities:

Edit their details
Perform CRUD operations on notes
Perform all actions that guests have access to

The model for the registered users will contain the attributes username, name, and email. Both the username and the email fields are mandatory fields as well as being unique in the database. Additionally, the username needs to be alphanumeric and have a maximum length of...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Mastering Web Application Development with Express

Search

Your notes and bookmarks