Server Request Security

thinkjones / meanterprise

MEAN based single page application with common SPA enterprise application add-ons.

MIT License

23 stars 2 forks source link

Server Request Security #1

Open sonicparke opened 10 years ago

sonicparke commented 10 years ago

I've been reading through http://www.frederiknakstad.com/2013/08/04/authentication-in-single-page-applications-with-angular-js-part-2/ and I'm wondering what it is about this approach to securing the server side that you didn't like? Is there any reason why I shouldn't implement this into your seed for my own use?

thinkjones commented 10 years ago

If we're talking about ensuring the server side is locked down and not trusting the client I am in full agreement. The meanp-seed project doesn't implement the server security yet. As I am Angular focussed I have just focussed on how you may programmatically lock down different screens on the client. If you'd like to contribute to the project feel free to fork and send a pull request would love to add any enhancements.