Book Image

MongoDB, Express, Angular, and Node.js Fundamentals

By : Paul Oluyege
Book Image

MongoDB, Express, Angular, and Node.js Fundamentals

By: Paul Oluyege

Overview of this book

MongoDB, Express, Angular and Node.js Fundamentals is a practical guide to the tried-and-true production-ready MEAN stack, with tips and best practices. The book begins by demystifying the MEAN architecture. You’ll take a look at the features of the JavaScript libraries, technologies, and frameworks that make up a MEAN stack. With this book, you'll not only learn how to develop highly scalable, asynchronous, and event-driven APIs quickly with Express and Node.js, but you'll also be able put your full-stack skills to use by building two full-fledged MEAN applications from scratch. You’ll understand how to build a blogging application using the MEAN stack and get to grips with user authentication using MEAN. As you progress through the chapters, you’ll explore some old and new features of Angular, such as pipes, reactive forms, modules and optimizing apps, animations and unit testing, and much more. By the end of the book, you’ll get ready to take control of the MEAN stack and transform into a full-stack JavaScript developer, developing efficient web applications using Javascript technologies.
Table of Contents (9 chapters)
MongoDB, Express, Angular, and Node.js Fundamentals
Preface

Node Security and Best Practices


We will begin this section by describing how security is handled and implemented by Node. In this section, we will be skimming through the security practices that are required for Node applications.

Securing your Node Applications

Security has become increasingly important ever since Node became one of the leading platforms for backend application development. Security matters because, as a backend or Node.js developer, you will be exposed to handing huge amounts of sensitive data, especially in the cloud native era where most business are operating in the cloud. The following Node modules have been strictly developed to address the aforementioned points:

  • Helmet modules

  • Input validations

  • Regular expressions

  • Security.txt

  • Session management

  • Cross-Site Request Forgery (CSRF)

We will begin by describing the Helmet module.

Helmet Module

Helmet provides various HTTP headers that can be set to secure Express applications. Among the collection of 14 middleware provided by...