Secure Your Node.js Web Application

Decide What Gets Logged

We’ve now set up a secure connection between the application and the users, but we’re still missing some important parts of our application’s support mechanisms.

Imagine that your company has an office in another country, and things there are very active, with people coming and going at all hours. You know this because you have cameras capturing information about what’s happening in that office. Logging is to your application what cameras are to that office. Without logging, you’d have no idea what’s happening with your application.

Other web servers do a basic amount of logging by default, but as I discussed before, Node.js does no hand-holding. You have to do this by yourself.

It’s a common misconception that logging ...