I have a linux box and just installed nodejs. A lot of the examples I see just do a specific function but dont see anywhere that they “secure” the nodejs server? For example for php I would use sessions to secure an area of my website. Is nodejs ok as is? Does it need additional settings or code in a nodejs to make sure only the right people are accessing it? Or is it ok right “out of the box”?
Share
Node is, essentially, just a web server. It doesn’t have any idea who are the “right people” to be accessing it, and will by default serve requests to any and all comers.
If you require specific access control mechanisms, it is your responsibility to implement that yourself.