book

Mastering Node.js Web Development

Name: Mastering Node.js Web Development
Author: Adam Freeman
ISBN: 9781804615072

by Adam Freeman

June 2024

Intermediate to advanced

778 pages

16h 2m

English

Packt Publishing

Read now

Unlock full access

Putting Node.js in Context
Getting Ready
What do you need to know?How do you set up your development environment?Are there lots of examples?Where can you get the example code?What if you have problems following the examples?What if you find an error in the book?How do you contact the author?What if you really enjoyed this book?What if this book has made you angry?
Working with the Node.js Tools
Getting readyInstalling GitSelecting a code editorUsing Node.jsUnderstanding the npm toolInitializing a projectManaging packagesInstalling development packagesListing packagesChecking for package security vulnerabilitiesExecuting packagesUsing the npx commandUsing script commandsDefining custom commandsSummary
JavaScript and TypeScript Primer
Preparing for this chapterUnderstanding JavaScript confusionUsing the JavaScript features to express type expectationsUsing JavaScript to check type expectationsUsing a type unionUnderstanding the basic TypeScript/JavaScript featuresDefining variables and constantsDealing with unassigned and null valuesUsing the JavaScript primitive typesWorking with booleansWorking with stringsUsing template stringsWorking with numbersWorking with null and undefined valuesUsing the JavaScript operatorsUsing conditional statementsThe equality operator vs. the identity operatorUsing the null and nullish coalescing operatorsUsing the optional chaining operatorDefining and using functionsDefining optional function parametersDefining default parameter valuesDefining rest parametersDefining functions that return resultsUsing functions as arguments to other functionsDefining functions using the arrow syntaxUnderstanding value closureWorking with arraysReading and modifying the contents of an arrayEnumerating the contents of an arrayUsing the spread operatorWorking with objectsUnderstanding literal object typesDefining optional properties in a type annotationDefining classesAdding methods to a classAccess controls and simplified constructorsUsing class inheritanceChecking object typesWorking with JavaScript modulesCreating and using modulesConsolidating module contentsSummary
Understanding Node.js Concurrency
Preparing for this chapterCreating a simple web applicationUnderstanding (simplified) server code executionUnderstanding multi-threaded executionUnderstanding blocking and non-blocking operationsUnderstanding JavaScript code executionUnderstanding Node.js code executionUsing the Node.js APIHandling eventsWorking with promisesWrapping callbacks and unwrapping promisesExecuting custom codeYielding control of the main threadUsing worker threadsWriting the worker codeCreating a worker threadPackaging worker threads into a callbackPackaging worker threads into a promiseSummary
Handling HTTP Requests
Preparing for this chapterListening for HTTP requestsUnderstanding the Server configuration objectUnderstanding HTTP requestsParsing URLsUnderstanding HTTP responsesSupporting HTTPS requestsCreating the self-signed certificateHandling HTTPS requestsDetecting HTTPS requestsRedirecting insecure requestsUsing third-party enhancementsUsing the Express routerUsing the request and response enhancementsUsing Express route parametersSummary
Using Node.js Streams
Preparing for this chapterUnderstanding streamsUsing Node.js streamsWriting data to a streamUnderstanding stream enhancementsAvoiding excessive data bufferingReading data from a streamUnderstanding the Readable classReading data with eventsReading data with an iteratorPiping data to a writable streamTransforming dataUsing object modeUsing third-party enhancementsWorking with filesServing files from client-side packagesSending and downloading filesAutomatically decoding and encoding JSONSummary
Using Bundles and Content Security
Preparing for this chapterPackaging client filesCreating stand-alone bundlesUsing the webpack development serverUsing a different request URLForwarding requests from webpack to the backend serverForwarding requests from the backend server to webpackUsing a content security policyInjecting malicious contentDefining a content security policyUsing a package to set the policy headerSummary
Unit Testing and Debugging
Preparing for this chapterUnit testing Node.js applicationsWriting unit testsArranging a testPerforming a testAsserting test resultsTesting asynchronous codeTesting promisesCreating subtestsDebugging javascript codeAdding code breakpointsUsing Visual Studio Code for debuggingUsing the remote Node.js debuggerSummary
Node.js in Detail

Creating the Example Project
Understanding the projectCreating the projectInstalling the application packagesInstalling the development tool packagesInstalling the type packagesCreating the configuration filesCreating the backend serverCreating the HTML and client-side JavaScript codeRunning the example applicationSummary
Using HTML Templates
Preparing for this chapterUsing server-side HTML templatesCreating a simple template engineCreating the custom template engineSetting up the custom template engineEvaluating expressions in templatesAdding template featuresMapping expressions to featuresUsing templates to create a simple round-trip applicationUsing client-side HTML templatesUsing a template packageUsing a package for server-side templatesDefining the templatesUsing a package for client-side templatesSummary
Handling Form Data
Preparing for this chapterReceiving form dataReceiving form data from GET requestsReceiving form data from POST requestsReceiving multipart dataSanitizing form dataValidating form dataCreating a custom validatorApplying validation rulesValidating dataPerforming client-side validationUsing a package for validationSummary
Using Databases
Preparing for this chapterUsing a databaseInstalling the database packageCreating a repository layerImplementing the repositoryQuerying the databaseDisplaying dataUnderstanding SQL query parametersWriting to the databaseUsing an ORM packageDefining the database using JavaScript objectsCreating the model classesInitializing the data modelConfiguring the model relationshipsDefining the seed dataConverting data models to flat objectsImplementing the repositoryQuerying for dataWriting dataApplying the repositorySummary
Using Sessions
Preparing for this chapterCorrelating stateless HTTP requestsUsing cookies to correlate requestsReceiving cookiesSetting and reading cookiesSigning cookiesUsing a package to manage cookiesUsing sessionsCreating the session middlewareUsing the session featureStoring session data in a databaseUsing a package for sessionsSummary
Creating RESTful Web Services
Preparing for this chapterPreparing for a web serviceUnderstanding web servicesCreating a basic RESTful web serviceGetting data for the web serviceSeparating the HTTP codeUpdating dataReplacing data with PUT requestsModifying data with PATCH requestsUsing JSON PatchValidating client dataCreating the validation infrastructureDefining validation for the Result APIPerforming model validationUsing a package for web servicesCreating an adaptor for web servicesSummary
Authenticating and Authorizing Requests
Preparing for this chapterUnderstanding the end-to-end processAuthenticating usersCreating a credential storeCreating the authentication workflowAuthenticating requestsUsing the authentication dataAuthenticating web service requestsCreating the authentication APIAuthenticating the web service clientAuthorizing requestsAdding support for rolesChecking authorizationAuthorizing API requestsUsing packages for authentication and authorizationAuthenticating HTML clientsSummary
SportsStore
SportsStore: A Real Application
Understanding the project structureCreating the projectSetting up the development toolsHandling HTTP requestsCreating a configuration systemAdding application routesAdding support for HTML templatesCreating layouts and templatesCreating error handlersStarting the data modelImplementing the repositoryCreating the repository classDefining the configuration settingsDefining the seed dataUsing the catalog dataSummary
SportsStore: Navigation and Cart
Preparing for this chapterNavigating the catalogPaginating catalog dataAdding pagination controlsChanging the page sizeFiltering catalog dataAdding filtering controlsUpdating the product displayCreating the shopping cartAdding configuration support for secretsCreating session middlewareDefining the cart data modelExtending the catalog repositoryCreating the HTTP routes and middlewareCreating the templatesCreating the cart summarySummary
SportsStore: Orders and Validation
Preparing for this chapterHandling ordersCreating the data modelImplementing the model classesCreating the order modelsImplementing the repositoryImplementing the order flowValidating dataDefining validation rulesCreating the HTTP handlersCreating the templates and helpersFixing the return URLSummary
SportsStore: Authentication
Preparing for this chapterUnderstanding the OAuth authentication processUnderstanding the advantages of OAuthUnderstanding the limitations of OAuthCreating the Google OAuth credentialsPublishing the appCreating the Client ID and Client SecretGetting profile details with OAuthImplementing the new repository featuresSetting Up OAuth authenticationChanging the cookie configurationApplying authenticationUsing the OAuth profile dataPlacing a second orderSummary
SportsStore: Administration
Preparing for this chapterUnderstanding HTML RESTful web servicesPreparing for client developmentCreating the routes and templatesConfiguring the applicationAdministering the product catalogStarting the web service routesDisplaying product data and deleting productsEditing productsAdding product data validationAdding the routes for editingCreating new productsAdministering ordersFixing the URLsRestricting access to administration featuresSummary
SportsStore: Deployment
Preparing for this chapterInstalling Docker DesktopManaging the databaseToggling the application environmentUsing a database serverCreating the SportsStore Docker imagePreparing the applicationCreating the SportsStore imageComposing the application and database serversSetting up an HTTPS reverse proxyUpdating the OAuth URLsCompleting the configurationSummary
Other Books You May Enjoy
Index

Content preview from Mastering Node.js Web Development

15 Authenticating and Authorizing Requests

Most projects need to restrict access to features; otherwise, anyone who knows an application’s URL can execute any operation. This is currently how the example application is set up: anyone who can request http://localhost:5000 will be able to store and delete data, regardless of who they are.

Authorization, often referred to as AuthZ, is the process of restricting access so that operations can only be performed by some users – known, naturally enough, as authorized users. Authentication, often referred to as AuthN, is the process of a user identifying themselves so that the application can determine whether the user is authorized for the operations they request. This chapter explains how Node.js applications ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781804615072

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Mastering Node.js Web Development

by Adam Freeman

15

Authenticating and Authorizing Requests

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.