book

Node.js Web Development - Fifth Edition

Name: Node.js Web Development - Fifth Edition
Author: David Herron
ISBN: 9781838987572

by David Herron

July 2020

Intermediate to advanced

760 pages

16h 20m

English

Packt Publishing

Read now

Unlock full access

Title Page
Copyright and Credits
Node.js Web Development Fifth Edition
Dedication
About Packt
Why subscribe?
Contributors
About the authorAbout the reviewersPackt is searching for authors like you
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesConventions usedGet in touchReviews
Section 1: Introduction to Node.js
About Node.js
Overview of Node.jsThe capabilities of Node.jsWhat are folks doing with Node.js?Server-side JavaScriptWhy should you use Node.js?PopularityJavaScript everywhereLeveraging Google's investment in V8Leaner, asynchronous, event-driven modelMicroservice architectureNode.js is stronger after a major schism and hostile forkThe Node.js event-driven architectureThe Node.js answer to complexityAsynchronous requests in Node.jsPerformance and utilizationIs Node.js a cancerous scalability disaster?Server utilization, overhead costs, and environmental impactEmbracing advances in the JavaScript languageDeploying ES2015/2016/2017/2018 JavaScript codeTypeScript and Node.jsDeveloping microservices or maxiservices with Node.jsSummary
Setting Up Node.js
System requirementsInstalling Node.js using package managersInstalling Node.js on macOS with MacPortsInstalling Node.js on macOS with HomebrewInstalling Node.js on Linux, *BSD, or Windows from package management systemsInstalling Node.js in WSLOpening an administrator-privileged PowerShell on WindowsInstalling the Node.js distribution from nodejs.orgInstalling from the source on POSIX-like systemsInstalling prerequisitesInstalling developer tools on macOSInstalling from the source for all POSIX-like systemsInstalling from the source on WindowsInstalling multiple Node.js instances with nvmInstalling nvm on WindowsRequirements for installing native code modulesChoosing Node.js versions to use and the version policyChoosing editors and debuggers for Node.jsRunning and testing commandsUsing Node.js's command-line toolsRunning a simple script with Node.jsWriting inline async arrow functionsConverting to async functions and the Promise paradigmLaunching a server with Node.jsUsing npm, the Node.js package managerUsing npx to execute Node.js packaged binariesAdvancing Node.js with ECMAScript 2015, 2016, 2017, and beyond Using Babel to use experimental JavaScript featuresSummary
Exploring Node.js Modules
Defining a Node.js moduleExamining the traditional Node.js module formatExamining the ES6/ES2015 module formatInjected objects in ES6 modulesComputing the missing __dirname variable in ES6 modulesUsing CommonJS and ES6 modules togetherUsing ES6 modules from CommonJS using import()Hiding implementation details with encapsulation in CommonJS and ES6 modulesUsing JSON modulesSupporting ES6 modules on older Node.js versionsFinding and loading modules using require and importUnderstanding File modulesThe ES6 import statement takes a URLUnderstanding the Node.js core modulesUsing a directory as a moduleComparing installed packages and modulesFinding the installed package in the file system Handling multiple versions of the same installed packageSearching for globally installed packagesReviewing module identifiers and pathnamesUsing deep import module specifiersOverriding a deep import module identifierStudying an example project directory structureLoading modules using require, import, and import()Using npm – the Node.js package management systemThe npm package formatAccessing npm helpful documentationInitializing a Node.js package or project with npm initFinding npm packagesThe package.json fields that help finding packagesInstalling an npm packageInstalling a package by version numberInstalling packages from outside the npm repositoryGlobal package installsAvoiding global module installationMaintaining package dependencies with npmAutomatically updating package.json dependenciesFixing bugs by updating package dependenciesExplicitly specifying package dependency version numbersPackages that install commandsConfiguring the PATH variable to handle locally installed commandsConfiguring the PATH variable on WindowsAvoiding modifications to the PATH variableUpdating packages you've installed when they're outdatedAutomating tasks with scripts in package.jsonDeclaring Node.js version compatibilityPublishing an npm packageThe Yarn package management systemSummary

HTTP Servers and Clients
Sending and receiving events with EventEmitterJavaScript classes and class inheritanceThe EventEmitter classThe EventEmitter theoryUnderstanding HTTP server applicationsES2015 multiline and template stringsHTTP Sniffer – listening to the HTTP conversationWeb application frameworksGetting started with ExpressSetting environment variables in the Windows cmd.exe command lineWalking through the default Express applicationUnderstanding Express middlewareContrasting middleware and request handlersError handlingCreating an Express application to compute Fibonacci numbersComputationally intensive code and the Node.js event loopAlgorithmic refactoringMaking HTTPClient requestsCalling a REST backend service from an Express applicationImplementing a simple REST server with ExpressRefactoring the Fibonacci application to call the REST serviceSome RESTful modules and frameworksSummary
Section 2: Developing the Express Application
Your First Express Application
Exploring Promises and async functions in Express router functionsPromises and error handling in Express router functionsIntegrating async functions with Express router functionsArchitecting an Express application in the MVC paradigmCreating the Notes applicationRewriting the generated router module as an ES6 moduleCreating the Notes application wiring – app.mjsImplementing the Notes data storage modelData hiding in ES-2015 class definitionsImplementing an in-memory Notes datastoreThe Notes home pageAdding a new note – createViewing notes – readEditing an existing note – updateDeleting notes – destroyTheming your Express applicationScaling up – running multiple Notes instancesSummary
Implementing the Mobile-First Paradigm
Understanding the problem – the Notes app isn't mobile-friendlyLearning the mobile-first paradigm theoryUsing Twitter Bootstrap on the Notes applicationSetting up BootstrapAdding Bootstrap to the Notes applicationAlternative layout frameworksFlexbox and CSS GridsMobile-first design for the Notes applicationLaying the Bootstrap grid foundationResponsive page structure for the Notes applicationUsing icon libraries and improving visual appealResponsive page header navigation barImproving the Notes list on the front pageCleaning up the note viewing experienceCleaning up the add/edit note formCleaning up the delete-note windowCustomizing a Bootstrap buildUsing third-party custom Bootstrap themesSummary
Data Storage and Retrieval
Remembering that data storage requires asynchronous codeLogging and capturing uncaught errorsRequest logging with morganDebugging messagesCapturing stdout and stderrCapturing uncaught exceptions and unhandled rejected PromisesStoring notes in a filesystemDynamically importing ES6 modulesRunning the Notes application with filesystem storageStoring notes with the LevelDB datastoreClosing database connections when closing the processStoring notes in SQL with SQLite3The SQLite3 database schemaThe SQLite3 model codeRunning Notes with SQLite3Storing notes the ORM way with SequelizeConfiguring Sequelize and connecting to a databaseCreating a Sequelize model for the Notes applicationRunning the Notes application with SequelizeStoring notes in MongoDBA MongoDB model for the Notes applicationRunning the Notes application with MongoDBSummary
Authenticating Users with a Microservice
Creating a user information microserviceDeveloping the user information modelCreating a REST server for user informationCreating a command-line tool to test and administer the user authentication serverCreating a user in the user information databaseReading user data from the user information serviceUpdating user information in the user information serviceDeleting a user record from the user information serviceChecking the user's password in the user information serviceProviding login support for the Notes applicationAccessing the user authentication REST APIIncorporating login and logout routing functions in the Notes applicationLogin/logout changes to app.mjsLogin/logout changes in routes/index.mjsLogin/logout changes required in routes/notes.mjsViewing template changes supporting login/logoutRunning the Notes application with user authenticationProviding Twitter login support for the Notes applicationRegistering an application with TwitterStoring authentication tokensImplementing TwitterStrategyKeeping secrets and passwords secureAdding password encryption to the user information serviceImplementing encrypted password support in the Notes applicationRunning the Notes application stackSummary
Dynamic Client/Server Interaction with Socket.IO
Introducing Socket.IOInitializing Socket.IO with ExpressReal-time updates on the Notes homepageRefactoring the NotesStore classes to emit eventsReal-time changes in the Notes home pageChanging the home page and layout templatesAdding a Socket.IO client to the Notes home pageRunning Notes with real-time home page updatesA word on enabling debug tracing in Socket.IO codeReal-time action while viewing notesChanging the note view template for real-time actionRunning Notes with pseudo-real-time updates while viewing a noteInter-user chat and commenting for NotesData model for storing messagesAdding support for messages to the Notes routerChanging the note view template for messagesComposing messages on the Note view pageShowing any existing messages on the Note view pageDeleting messages on the Notes view pageRunning Notes and passing messagesSummary
Section 3: Deployment
Deploying Node.js Applications to Linux Servers
Notes application architecture and deployment considerationsTraditional Linux deployment for Node.js servicesInstalling MultipassHandling a failure to launch Multipass instances on WindowsProvisioning a server for the user authentication serviceTesting the deployed user authentication serviceScript execution in PowerShell on WindowsProvisioning a server for the Notes serviceAdjusting Twitter authentication to work on the serverSetting up PM2 to manage Node.js processesFamiliarizing ourselves with PM2Scripting the PM2 setup on MultipassIntegrating the PM2 setup as persistent background processesSummary
Deploying Node.js Microservices with Docker
Setting up Docker on your laptop or computerInstalling and starting Docker with Docker for Windows or macOSFamiliarizing ourselves with DockerSetting up the user authentication service in DockerLaunching a MySQL container in DockerThe ephemeral nature of Docker containersDefining the Docker architecture for the authentication serviceCreating the MySQL container for the authentication serviceSecurity in the database containerDockerizing the authentication serviceCreating the authentication service Dockerfile Building and running the authentication service Docker containerExploring AuthNetCreating FrontNet for the Notes applicationMySQL container for the Notes applicationDockerizing the Notes applicationManaging multiple containers with Docker ComposeDocker Compose file for the Notes stackBuilding and running the Notes application with Docker ComposeUsing Redis for scaling the Notes application stackTesting session management with multiple Notes service instancesStoring Express/Passport session data in a Redis serverDistributing Socket.IO messages using RedisSummary
Deploying a Docker Swarm to AWS EC2 with Terraform
Signing up with AWS and configuring the AWS CLIFinding your way around the AWS accountSetting up the AWS CLI using AWS authentication credentialsCreating an IAM user account, groups, and rolesCreating an EC2 key pairAn overview of the AWS infrastructure to be deployedUsing Terraform to create an AWS infrastructureConfiguring an AWS VPC with TerraformConfiguring the AWS gateway and subnet resourcesDeploying the infrastructure to AWS using TerraformSetting up a Docker Swarm cluster on AWS EC2Deploying a single-node Docker Swarm on a single EC2 instanceAdding an EC2 instance and configuring DockerLaunching the EC2 instance on AWSHandling the AWS EC2 key-pair fileTesting the initial Docker SwarmSetting up remote control access to a Docker Swarm hosted on EC2Setting up ECR repositories for Notes Docker imagesUsing environment variables for AWS CLI commandsDefining a process to build Docker images and push them to the AWS ECRCreating a Docker stack file for deployment to Docker SwarmCreating a Docker stack file from the Notes Docker compose filePlacing containers across the swarmConfiguring secrets in Docker SwarmPersisting data in a Docker swarmProvisioning EC2 instances for a full Docker swarmConfiguring EC2 instances and connecting to the swarmImplementing semi-automatic initialization of the Docker SwarmPreparing the Docker Swarm before deploying the Notes stackDeploying the Notes stack file to the swarmPreparing to deploy the Notes stack to the swarmDeploying the Notes stack to the swarmVerifying the correct launch of the Notes application stackDiagnosing a failure to launch the database servicesTesting the deployed Notes applicationLogging in with a regular account on NotesDiagnosing an inability to log in with Twitter credentialsScaling the Notes instancesSummary
Unit Testing and Functional Testing
Assert – the basis of testing methodologiesTesting a Notes modelMocha and Chai – the chosen test toolsNotes model test suiteCreating the initial Notes model test caseRunning the first test caseAdding some testsMore tests for the Notes modelDiagnosing test failuresTesting against databases that require server setup – MySQL and MongoDBUsing Docker Swarm to manage test infrastructureUsing Docker Swarm to deploy test infrastructureExecuting tests under Docker SwarmMongoDB setup under Docker and testing Notes against MongoDBTesting REST backend servicesAutomating test results reportingFrontend headless browser testing with PuppeteerSetting up a Puppeteer-based testing project directoryCreating an initial Puppeteer test for the Notes application stackExecuting the initial Puppeteer testTesting login/logout functionality in NotesTesting the ability to add NotesImplementing negative tests with PuppeteerTesting login with a bad user IDTesting a response to a bad URL Improving testability in the Notes UISummary
Security in Node.js Applications
Implementing HTTPS in Docker for deployed Node.js applicationsAssigning a domain name for an application deployed on AWS EC2Updating the Twitter applicationPlanning how to use Let's EncryptUsing NGINX and Let's Encrypt in Docker to implement HTTPS for NotesAdding the Cronginx container to support HTTPS on NotesCreating an NGINX configuration to support registering domains with Let's EncryptAdding the required directories on the EC2 hostDeploying the EC2 cluster and Docker swarmRegistering a domain with Let's EncryptImplementing an NGINX HTTPS configuration using Let's Encrypt certificatesTesting HTTPS support for the Notes applicationUsing Helmet for across-the-board security in Express applicationsUsing Helmet to set the Content-Security-Policy headerMaking the ContentSecurityPolicy configurableUsing Helmet to set the X-DNS-Prefetch-Control headerUsing Helmet to control enabled browser features using the Feature-Policy headerUsing Helmet to set the X-Frame-Options headerUsing Helmet to remove the X-Powered-By headerImproving HTTPS with Strict Transport SecurityMitigating XSS attacks with HelmetAddressing Cross-Site Request Forgery (CSRF) attacksDenying SQL injection attacksScanning for known vulnerabilities in Node.js packagesUsing good cookie practicesHardening the AWS EC2 deploymentAWS EC2 security best practicesSummary
Other Books You May Enjoy
Leave a review - let other readers know what you think

Content preview from Node.js Web Development - Fifth Edition

Deploying Node.js Applications to Linux Servers

Now that the Notes application is fairly complete, it's time to think about how to deploy it to a real server. We've created a minimal implementation of the collaborative note concept that works fairly well. To grow, Notes must escape our laptop and live on a real server.

The user story to fulfill is access to a hosted application that's available even when your laptop is turned off, for evaluation. The developer stories are to identify one of several deployment solutions, to have enough reliability so that the system restarts when it crashes, and for the users can access the app without taking too much of the developers time.

In this chapter, we will cover the following topics:

A discussion ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Node.js Web Development - Fourth Edition

Publisher Resources

ISBN: 9781838987572

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Node.js Web Development - Fifth Edition

by David Herron

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.