Security

[Type-Style]

• Read about Node/Express JS Security

• Read about Express Security

• Read about Express Security Tips

• Read about Auth0 Guide

• Add Rate Limiter moved to own issue

• Avoid parameter pollution

• consider csrf

• Read about Helmet

• Read about JWT

• Protect writing Webhook

  • apache password
  • check UAS (example: Dalvik/2.1.0 (Linux; U; Android 8.1.0; SM-T585 Build/M1AJQ)) maybe
  • use password and environment keys

• add hidden checks that are not part of repository

• consider these options