Security best practices
Security is a never-ending battle. There are countless ways that a given application can be exploited. As engineers, our job is to minimize the attack vectors available to attackers. We can never cover all of the holes, but it is still our duty to try. What follows is a non-exhaustive list of security best practices that will help to keep your application as secure as possible.
Use TLS!
This may seem like an obvious tip, but it is important enough to note. Use secure communication channels! This applies for when your client application talks to service providers, as well as when the service providers talk to your client application.
When your client application talks to the service provider, it does so by interacting with ...
Get Mastering OAuth 2.0 now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
