Security Liablities - Githubissues

A2Chat / A2ChatBackend

MIT License

0 stars 2 forks source link

Security Liablities #49

Open KamiKemiKimi opened 3 hours ago

KamiKemiKimi commented 3 hours ago

IMPORTANT TODO: Firebase Firestore/Realtime Rules: allow read and write for only authorized users

TODO 2: Rate limiting: limit how many requests a client can make within a time frame

Node.js 'Express-rate-limit'
Throttle access if too quick (whitelist ip address)

TODO 3: Cross-Origin Resource Sharing: prevent Postman or unauthorized website to access API

Node.js 'cors' package

KamiKemiKimi commented 3 hours ago

Also remove all logging that involves userids, lobbyids, or jwttokens