From the course: React: Authentication (2021)

Unlock the full course today

Join today to access over 24,500 courses taught by industry experts.

Never trust the front end

Never trust the front end - React.js Tutorial

From the course: React: Authentication (2021)

Start my 1-month free trial Buy for my team

Never trust the front end

“

- Alright, let's move on to our third best practice which is something that I always make sure to tell people when they're first starting off with full stack development, and that is to never trust the front end. So what do I mean by this? Well, when I say never trust the front end I mean that when you're building a full stack application and you want to enforce some kind of security measure, it's absolutely critical that this protective logic is implemented on the server and does not rely on client-side logic alone. So some examples of this might be that maybe you want to make sure that users can only view their own data. Or, maybe you want to make sure that users aren't allowed to add arbitrary fields to the data that we store in our database, as we've already done. Or maybe you want to make sure that only paid subscribers to your website can access certain content. Again, in all of these cases, you need to implement…

Contents