Saturday, 16 February 2019

Security rules to consider for a web service which exposes a database to the frontend

I know this sounds insane, but I'm building a web service which exposes any database over a REST API. I'm letting a user to perform crud operations on the database. Using authentication using JWT. Have built some JSON security rules to enforce certain conditions like (database query, matches against JWT claims, etc.) which helps me control the where clause, etc. the user may put. Deeply inspired by google firebase. Any suggestions on what other security measures i need to put in?

Submitted February 16, 2019 at 09:05AM by YourTechBud

No comments:

Post a Comment