Secure the Web with an API-Driven Backend for Frontend

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

https://www.linkedin.com/in/gary-archer-6b3613153/ Building and securing browser-based apps has always been a challenge. Threats such as https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html are a major concern, and a secure development life cycle must be followed to prevent them.

Even if your web apps do not yet use OAuth, it’s a best practice to only use secure cookies in the browser.

For any web architecture where cookies secure the app, you need distinct routes into APIs for each web app.

Implement a Backend for Frontend for each web app to issue secure cookies and aim to separate web and API concerns.

DevOps Articles