Saturday 15 April 2017

How safe is data in req.user with Passport?

Where is it stored? Is it coming from the user with every request? If so, can I trust that a malicious user hasn't modified it?I don't know the underlying code at work so I'm not sure if it's safe for me to just trust req.user, cause it contains info like how far the user the progressed in a game, and I don't want them to be able to cheat.

Submitted April 15, 2017 at 10:11AM by NSDCars5

No comments:

Post a Comment