Wrapping Up
In this chapter we looked into hardening one of the backbones of web application securityâauthenticating the user. We looked at ways to store passwords securely, how to force users to use stronger passwords, how to protect against brute-force attacks, and how to add a second layer of protection.
Having covered the bases for authenticating a user, we now look at how the application remembers the user for a set period of time. Weâll cover sessions in the next chapter so that your users wonât have to keep typing in their password everytime they want to do something.
Get Secure Your Node.js Web Application now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
