ReactSecurity - Maintain an Allowed List for Sending Tokens

Опубликовано: 21 Апрель 2020
на канале: Holodeck
1,365
17

See the full course at https://reactsecurity.io

Many React applications need to make data requests to different APIs served by different parties. Some of those parties may be owned and controlled by us, while others may be out of our control (ex: third party or public APIs).

We really shouldn't be sending JSON Web Tokens to servers that we don't own because there's no way we can know what those servers are doing with them. At the very least, they may be storing our users' tokens in their logs. Since JWTs are sensitive credentials, we really should keep them away from places we don't control.

Let's see how we can use Axios to limit that places our JWTs end up.


Смотрите видео ReactSecurity - Maintain an Allowed List for Sending Tokens онлайн, длительностью часов минут секунд в хорошем качестве, которое загружено на канал Holodeck 21 Апрель 2020. Делитесь ссылкой на видео в социальных сетях, чтобы ваши подписчики и друзья так же посмотрели это видео. Данный видеоклип посмотрели 1,365 раз и оно понравилось 17 посетителям.