2 ms·
A good security strategy is to implement custom security layer as a last resort. Doing so will have a much higher chance of introducing bugs that will allow at
by jordache 10y ago
A good security strategy is to implement custom security layer as a last resort. Doing so will have a much higher chance of introducing bugs that will allow attacker into your environment.
- quasse 10y agoYeah, in this case I'd tend to agree that using a good framework like Passport and then the JWT[1] strategy is probably a good move. It's never a bad idea to understand the basic structure of how a framework might be doing the work for you behind the scenes though. [1] https://www.npmjs.com/package/passport-jwt https://www.npmjs.com/package/passport-jwt