Node.js Security Best Practices: JWT blacklisting, rate limiting, schema validation

[@SoftwareDeveloperDiaries]

Check out Docuo 👉 bit.ly/3SaTsQV

[@vineetsingh904]

I fell weird when I see less subscriber You at least deserve 1-2 million subscribers. Your channel is the best because no one tell these things and you not only talk about these things but also tell what to use in real world projects. Even paid courses don't teaches or even tell about these thing. You a great

[@SoftwareDeveloperDiaries]

Thanks a lot my friend! :)

[@wishmeheaven]

Thanks!
I was actually looking for other topics such as NoSQL injection, sanitize, XXS protection, security headers, rate limiting (indeed included here), HPP and CORS.
I'm a backend development student looking to dig further at security issues...
Thank you very much for this series, and I can hardly wait to find out what other topics will it maneuvering through...

[@SoftwareDeveloperDiaries]

Thanks for the feedback my friend! New episodes coming soon 😎

[@icaromendes1250]

Is the kind of content everyone needs but no one is mentioning

[@mrunalvaidya388]

Amazing content as always🙌

[@koningguidokip]

I've learned so much from this!

[@babayaga6172]

Can u please make a video about multithreading clustering twice by quoting a example of large project scaling

[@babayaga6172]

Literally U r doing amazing job 👏🏼

[@SoftwareDeveloperDiaries]

Thank you!!

[@OCEMTechZone]

Great one

[@elmasx]

Hello, Guseyn. You're so sweet. I just discovered your channel and I admire it, I learned a lot. I wonder if there will be a classic nodejs, deno and bun comparison? I would like to know your opinion, regards.

[@SoftwareDeveloperDiaries]

Really happy to hear that! 🙂I will keep those in mind 😉

[@elmasx]

@@SoftwareDeveloperDiaries Thank you so much!

[@NPCtoHero]

🎉 Great video !

[@tarekalkhatib5619]

great content, do you plan on releasing part 3 any time soon

[@SoftwareDeveloperDiaries]

Yess, it’s coming out soon! 😉

[@codermeloman3030]

Super content!!!

[@jeremyccc]

Thanks for this!

[@SoftwareDeveloperDiaries]

My pleasure!

[@taras0varty0m]

instead of bcrypt, it is better to use a scrypt that is embedded in node.js

[@aliarslanansari]

reason?

[@taras0varty0m]

@@aliarslanansari
With scrypt in addition to increasing computation you can increase the amount of memory needed to compute the hash. This doesn't bother software implementations much but is much harder to implement with hardware - which is what a dedicated attacker is likely to develop and use.
bcrypt (and PBKDF2) use constant, and small, amounts of memory.

[@taras0varty0m]

@@aliarslanansari answer from stackoverflow

[@taras0varty0m]

@@aliarslanansari and an additional library, this is a greater weight of the bundle or the final container after the application is built.

[@SoftwareDeveloperDiaries]

Thanks for the hint, you're totally right, it's a better option for most use-cases

[@ismaildeveloper]

great

[@danielson9490]

NodeJS Security Best Practices:
- 1. Rate Limiting
- 2. Password Encryption
- 3. JWT Blacklisting
- 4. JSON Schema Validation
- 5. Escaping HTML & CSS
- 6. ORM/ODM agains Injections
- 7. Security Linter

[@thomasr22272]

Just one thing, hashing is not technically encryption

[@liammullan2197]

A piece of advice on the sound... there is a noise gate over your voice and it is way too aggressive and keeps on cutting off bits of your words.

[@SoftwareDeveloperDiaries]

I’ve fixed it recently for my newer videos 🫶

[@ratedr278]

Bro, get rid of that background music, it's unprofessional. (Distracting and out of place)

[@SoftwareDeveloperDiaries]

Will keep in mind, thanks for the feedback ✌